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ABSTRACT 


The  recent  emphasis  in  all  levels  of  government  on  ac¬ 
countability  of  resources  has  resulted  in  an  increase  in  con¬ 
cern  for  internal  control.  Included  in  internal  control 
systems  is  internal  auditing.  Self-review  at  a  field  ac¬ 
tivity  takes  the  form  of  Internal  Review.  This  thesis 
examines  the  conceptual  basis  of  Internal  Review  by  dis¬ 
cussing  auditing  and  more  specifically  internal  auditing  in 
both  the  Public  and  Private  Sectors  followed  by  a  comparison 
with  internal  auditing  and  internal  review  in  the  Depart¬ 
ment  of  the  Navy,  including  a  case  study  of  a  Marine  Corps 
Air  Station  Internal  Review  Division.  Information  for  this 
thesis  was  collected  by  a  library  search,  numerous  phone 
calls  (including  calls  to  the  Office  of  the  Director  of 
Internal  Audit  Policy  for  the  Department  of  Defense,  the 
Naval  Audit  Service  Headquarters,  and  the  Marine  Corps  Air 
Station  in  the  case  study) ,  and  materials  provided  by  the 
Naval  Audit  Service  and  the  Marine  Corps  Air  Station. 
Recommendations  for  improvement  are  included  for  both  the 
policy-making  and  operating  levels  of  the  Department  of 
Defense  and  the  Department  of  the  Navy. 
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I.  INTRODUCTION 


"We  have  an  obligation  to  manage  with  excellence..." 

President  Carter 

Numerous  efforts  have  been  in  progress  for  a  long  period 

of  time  to  improve  government's  management  of  its  financial 

resources,  such  as  the  Joint  Financial  Management  Improvement 

Program  which  began  in  1948.  Recently  there  has  been  a  re- 
2 

newed  emphasis.  President  Carter  has  identified  nine  finan¬ 
cial  priorities  in  the  overall  effort  to  improve  existing 
financial  management  systems.^  Included  in  these  nine  priori¬ 
ties  are: 

1.  Internal  control:  upgrade  control  systems  to  reduce 
the  risk  of  fraud,  abuse,  waste,  and  inefficiency. 

2.  Audit  follow-up:  resolve  findings  promptly  and 
properly,  and  hold  down  backlog. 

The  Inspector  General  Act  of  1978  placed  various  respon¬ 
sibilities  on  all  agencies  within  the  government,  including 
the  military,  to  identify  and  report  fraud/abuse/waste  within 

4 

government.  In  compliance  with  the  Act,  the  Office  of  the 
Secretary  of  Defense  has  expressed  an  interest  in  all  types  of 
self  review  including  the  efforts  of  internal  review  staffs 
at  the  field  activity  level.5 

The  Naval  Audit  Service,  as  the  internal  audit  organization 
for  the  Department  of  the  Navy,  has  continually  placed  great 
emphasis  on  examining  audited  activities  systems  of  internal 
control,  of  which  internal  review  is  a  component,  at  field 
activities.5  Since  the  Naval  Audit  Service  is  able  to  audit 
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major  field  activities  only  about  once  every  three  years,  and 
all  activities  within  five  years,  internal  review  becomes  an 
even  more  important  aspect  of  internal  control. ^ 

A.  OBJECTIVE  OF  THE  STUDY 

At  the  present,  internal  review  is  in  a  period  of  growth 
and  under  closer  scrutiny  at  all  levels  of  government,  but  it 

O 

still  is  not  at  the  level  of  performance  needed.  The  pur¬ 
pose  of  this  thesis  is  to  examine  the  practice  of  internal 
review  within  the  Department  of  the  Navy,  determine  its  re¬ 
quirements,  and  make  recommendations  regarding  its  improvement. 

B .  METHODOLOGY 

The  evaluation  of  internal  review  will  be  discussed  in 
three  basic  parts:  a.)  conceptual  foundations  in  the  Private 
Sector  and  applications  in  the  Public  Sector,  b.)  internal 
auditing  and  internal  review  in  the  Department  of  the  Navy, 
and  c.)  examination  of  a  Marine  Corps  Air  Station  Internal 
Review  Division  for  the  purpose  of  making  recommendations  for 
improvement,  with  possible  application  at  similar  activities. 

Chapter  II  discusses  auditing  and  internal  auditing  in 
the  Private  and  Public  Sector  with  emphasis  on  the  types  of 
audits,  auditing  standards,  and  the  audit  process.  The  simi¬ 
larities  and  differences  in  application  in  both  sectors  are 
considered.  Research  for  this  chapter  consisted  of  a  library 
search  of  appropriate  materials  and  use  of  the  Defense  Logis¬ 
tics  Studies  Information  Exchange. 
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Internal  auditing  and  internal  review  are  considered  in 
Chapter  III.  The  limited  description  provided  by  the  Depart¬ 
ment  of  Defense  on  internal  review  is  discussed,  and  apparent 
differences  between  the  Department  of  Defense  and  Department 
of  the  Navy  directives  on  internal  review  are  highlighted. 

The  Department  of  the  Navy  audit  process,  which  is  considered 
by  the  Department  of  the  Navy  to  be  applicable  to  internal 
review,  is  examined.  In  addition,  the  present  and  soon-to-be- 
promulgated  Marine  Corps  Orders  are  compared,  with  appropriate 
comments  concerning  the  Secretary  of  the  Navy  Instruction.  The 
material  for  this  chapter  was  largely  obtained  from  a  library 
search,  material  from  the  Defense  Logistics  Studies  Information 
Exchange,  phone  calls  to  Headquarters,  Marine  Corps,  and  the 
Office  of  the  Director  for  Internal  Audit  Policy  for  the  Depart 
ment  of  Defense,  and  material  from  the  Naval  Audit  Service. 

Chapter  IV  is  a  discussion  of  the  Internal  Review  Division 
of  a  Marine  Corps  Air  Station  organization,  staffing,  review 
program,  and  approach  to  the  performance  of  a  review.  The 
chapter  includes  the  narrow  emphasis  at  the  Air  Station  on 
financial  resources  rather  than  a  more  comprehensive  approach 
that  would  include  all  types  of  resources.  Material  for  this 
chapter  was  obtained  from  the  Comptroller  and  the  Internal 
Review  Division  of  the  Air  Station  through  the  mail,  by  phone, 
and  from  a  visit  to  the  Air  Station  by  the  author. 

The  comparison  of  the  case  study  and  the  applicable  Marine 
Corps  Orders  and  Secretary  of  the  Navy  Instruction  for  internal 
review  is  contained  in  Chapter  V.  The  chapter  also  includes 
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recommendations  for  improvement  of  Internal  Review  at  both 
the  policy-making  and  operating  levels. 
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II.  AUDITING 


BACKGROUND 


The  concept  of  accountability  for  utilization  of  public 

resources  entrusted  to  government  agencies  includes  not  only 

the  object  of  their  use  but  also  the  manner  and  effect  of 
9 

their  use.  This  idea  constitutes  a  large  part  of  management 
control,  which  is  defined  as  the  process  by  which  assurance  is 
made  that  resources  are  obtained  and  used  effectively/effi¬ 
ciently  in  accomplishment  of  an  organization's  objectives . ^ 
The  essence  of  management  control  is  the  corrective  action 
taken  to  ensure  that  the  performance  of  an  organization  con¬ 
forms  with  established  standards  or  requirements.^  For  such 
action  to  be  taken,  information  must  be  made  available  to  all 
levels  of  management  in  a  timely  and  reliable  form.  To  ensure 

such  reliability,  a  common  method  is  independent  verification 
12 

or  audit. 

The  common  understanding  of  the  term  "audit"  is  reflected 

in  the  following  definition: 

"Auditing  is  an  integrated  process  of  accumulating 
and  evaluating  evidence  by  a  competent  person  about 
quantifiable  information  of  a  specific  economic  entity 
for  the  purpose  of  determining  and  reporting  upon  the 
degree  of  correspondence  between  the  quantifiable  in¬ 
formation  and  established  criteria. 

This  function  is  applicable  to  both  the  private  and  public 

sectors  of  any  economy. 

A.  PRIVATE  SECTOR 

The  three  most  recognized  types  of  audits  in  the  private 
14 

sector  are: 
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1.  compliance  audit 

2.  audit  of  financial  statements 

3.  operational  audit 

The  purpose  of  a  compliance  audit  is  to  determine  if  the 
audited  entity  has  been  and  is  complying  with  rules  or  proce¬ 
dures  established  by  higher  authority.  Usually  internal  man¬ 
agement  is  the  chief  user  of  the  results  of  such  an  audit. 

An  audit  of  financial  statements  has  the  purpose  of  deter¬ 
mining  whether  the  overall  financial  statements  are  correctly 
stated  as  evaluated  in  accordance  with  established  criteria, 
usually  generally  accepted  accounting  principles.  It  is  this 
type  of  audit  that  has  been  the  most  highly  developed;  however, 
the  auditing  process  is  applicable  not  just  to  financial  state¬ 
ments  but  also  to  information  systems  and  to  the  performance 
of  economic  activity.  This  is  indicated  by  the  increase  in 

15 

the  number  of  operational  audits  in  recent  years. 

An  operational  audit  is  a  review  of  an  organization's 
operating  procedures  and  methods  for  the  purpose  of  evaluat¬ 
ing  efficiency  and  effectiveness.  This  type  of  audit  is  more 
difficult  to  plan  and  execute  because  of  the  subjective  nature 
of  evaluation  criteria  and  the  fact  that  the  areas  reviewed 
include  not  only  accounting  data  but  organizational  structure, 
methods,  operations,  or  any  area  where  the  auditor  is  qualified. 
All  of  these  audit  types  are  undertaken  through  a  framework  or 
Generally  Accepted  Accounting  Principles  and  Generally  Accepted 
Auditing  Standards. 


1.  Generally  Accepted  Auditing  Standards 

An  auditing  standard  is  a  general  guideline  to  aid  an 
auditor  in  fulfillment  of  his  responsibilities.  The  standards 
were  developed  by  the  American  Institute  of  Certified  Public 
Accountants  (AICPA)  and  consist  of  three  types 

a.  General  standards  —  personal  qualities  auditors 
should  possess. 

b.  Standards  of  field  work  —  concern  the  performance 
of  the  field  work. 

c.  Standards  of  reporting  --  deal  with  the  issuance 
of  a  proper  audit  report. 

a.  General  Standards 

1. )  The  examination  is  to  be  performed  by  a  person 
or  persons  having  adequate  technical  training  and  proficiency 
as  an  auditor. 

2. )  In  all  matters  relating  to  the  assignment,  an 
independence  in  mental  attitude  is  to  be  maintained  by  the 
auditor  or  auditors . 

3. )  Due  professional  care  is  to  be  exercised  in 
the  performance  of  the  examination  and  the  preparation  of  the 
report. 

b.  Standards  of  Field  Work 

1. )  The  work  is  to  be  adequately  planned  and  assist¬ 
ants,  if  any,  are  to  be  properly  supervised. 

2. )  There  is  to  be  a  proper  study  and  evaluation 


of  the  existing  internal  control  as  a  basis  of  reliance  there¬ 
on  and  for  the  determination  of  the  resultant  extent  of  the 
tests  to  which  auditing  procedures  are  to  be  restricted. 


3.)  Sufficient  competent  evidential  matter  is  to 
be  obtained  through  inspection,  observation,  inquiries,  and 
confirmations  to  afford  a  reasonable  basis  of  an  opinion  re¬ 
garding  the  financial  statements  under  examination, 
c.  Standards  of  Reporting 

1. )  The  report  shall  state  whether  the  financial 
statements  are  presented  in  accordance  with  generally  accepted 
accounting  principles. 

2. )  The  report  shall  state  whether  such  principles 
have  been  consistently  observed  in  the  current  period  in  rela¬ 
tion  to  the  preceding  period. 

3. )  Informative  disclosures  in  the  financial  state¬ 
ments  are  to  be  regarded  as  reasonably  adequate  unless  other¬ 
wise  stated  in  the  report. 

4. )  The  report  shall  either  contain  an  expression 
of  opinion  regarding  the  financial  statements,  taken  as  a  whole, 
or  an  assertion  to  the  effect  that  an  opinion  cannot  be  ex¬ 
pressed.  When  an  overall  opinion  cannot  be  expressed,  the 
reasons  therefore  should  be  stated.  In  all  cases  where  an 
auditor's  name  is  associated  with  financial  statements,  the 
report  should  contain  a  clear-cut  indication  of  the  character 

of  the  auditor's  examination,  if  any,  and  the  degree  of  respon¬ 
sibility  he  is  taking. 

Whenever  an  auditing  problem  arises  of  sufficient 
importance  to  warrant  an  interpretation  of  the  AICPA,  State¬ 
ments  on  Auditing  Standards  are  issued,  and  together  with 
Generally  Accepted  Auditing  Standards,  form  the  authoritative 
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literature  on  auditing.  One  important  point  is  apparent,  and 

this  is  that  there  are  no  specific  audit  procedures  and  no 

specific  requirements  for  determining  sample  size,  sample 

selection,  or  evaluating  results.  The  commonly  accepted 

reason  for  this  is  that  rigid  guidelines  would  limit  the  use 

of  professional  judgement  of  auditors,  making  an  audit  a 

mechanistic  evidence  gathering  procedure.^-7  More  specific 

guidelines  are  found  in  less  authoritative  sources,  such  as 

textbooks,  journals,  and  technical  publications. 

2 .  Audit  Evidence  Decisions 

One  of  the  most  important  judgemental  problems  facing 

every  auditor  is  the  appropriate  amount  of  evidence  required 

18 

for  a  given  audit.  The  problem  is  one  of  time  and  money 

weighed  against  reasonable  satisfaction  of  an  accurate  report. 

The  evidence  accumulation  process  can  be  broken  into  four 

19 

interrelated  decisions: 

a.  Audit  procedures  to  use. 

b.  Sample  size  to  select  for  a  given  procedure. 

c.  Particular  items  to  select  from  a  population. 

d.  Appropriate  time  to  perform  the  procedures. 

In  any  audit  area,  there  are  some  procedures  that  will 
almost  always  be  used,  which  are  called  the  minimum  audit  pro¬ 
cedures.  This  is  significant  in  that  auditor  judgement  deter¬ 
mines  the  appropriate  procedures  to  be  used  in  each  case,  be¬ 
cause  the  AICPA  has  not  specified  a  set  of  minimum  audit  pro¬ 
cedures  for  each  audit  area. 

The  methodology  in  choosing  a  sample  may  range  from 
the  highly  subjective  judgement  sample  to  the  more  sophisti¬ 
cated  statistical  sampling  techniques,  including  use  of 
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confidence  levels  or  the  more  complex  Bayesian  statistics. 

Regardless  of  the  type  of  method  used,  the  only  differences 

involve  the  sampling  and  not  the  procedures  or  tests,  which 

are  determined  independent  of  the  sample.  However,  judgement 

20 

needs  to  be  applied  regardless  of  methodology. 

This  aspect  is  related  to  sample  size  in  that  items 
may  be  chosen  on  the  basis  of  judgement  or  statistical  selec¬ 
tion.  The  important  concerns  are  that  a  representative  sample 
is  obtained  and  that  items  most  likely  to  be  in  error  are 
emphasized.  Both  are  accomplished  by  taking  a  larger  portion 
of  certain  types  of  items,  and  at  the  same  time  including  some 
of  each  type  of  item. 

3 .  The  Auditor's  Decision  Process 

An  important  decision  in  conducting  every  audit  is 
determining  the  appropriate  amount  of  evidence  to  accumulate. 
The  decision  is  based  on  the  degree  of  responsibility  the 

auditor  takes  for  the  fair  presentation  of  financial  state- 
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ments,  and  the  particular  circumstances  in  a  specific  audit. 

Responsibility  in  performing  an  audit  is  generally  identified 

as  limited  to  performing  the  audit  and  reporting  in  accordance 

with  generally  accepted  auditing  standards.  In  effect,  the 

standard  of  evidence  accumulation  used  by  most  competent 

auditors  is  to  continue  to  the  point  where  the  probability  of 

material  errors  existing  in  the  financial  statements  is  low. 

The  value  of  this  point  is  based  on  judgement.  This  is  cer¬ 


tainly  affected  by  the  existing  circumstances  of  the  audit 


regarding  the  extent  to  which  external  users  rely  on  the 
statements  and  the  likelihood  of  the  audited  organization  to 
file  bankruptcy. 

4 .  Types  of  Evidence 
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There  are  seven  types  of  evidence  used  in  audits: 

a.  Physical  examination  —  inspection  or  count  by 
the  auditor  of  a  tangible  asset;  e.g.,  cash,  inventory. 

b.  Confirmation  —  receipt  of  a  written  response 
from  an  independent  third  party  verifying  the  accuracy  of 
information  requested;  e.g.,  accounts  receivable,  sales 
transactions . 

c.  Documentation  —  examination  of  records  and  docu¬ 
ments  to  substantiate  information  in  the  statements. 

d.  Observation  —  use  of  the  senses  to  assess  cer¬ 
tain  activities,  such  as  evaluating  inventory  for  obsolescence 
by  checking  for  rust. 

e.  Inquiries  —  written  or  oral  information  from  the 
audited  organization  in  response  to  questions  from  the  auditor 

f.  Mechanical  accuracy  —  rechecking  a  sample  of  the 
computations  and  transfers  of  information  made  by  the  audited 
organization  during  the  period  under  audit. 

g.  Comparisons  and  relationships  —  isolation  of 
accounts  or  transactions  to  be  more  intensively  investigated 
by  use  of  calculations,  such  as  particular  expenses  in  dif¬ 
ferent  time  periods. 

5.  Overview  of  the  Audit  Process 


spective  of  auditing.  Figure  1  is  a  diagram  of  the  overview 
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of  the  audit  process  in  the  private  sector.  This  process 
includes : 

a.  Obtain  a  general  understanding  of  the  client  and 
its  circumstances. 

b.  Study  and  evaluate  the  system  of  internal  control. 

c.  Test  the  effectiveness  of  the  system. 

d.  Directly  test  the  financial  statement  accounts. 

e.  Complete  the  audit,  combine  the  results  of  all 
the  tests,  and  draw  conclusions. 

f.  Issue  an  audit  report. 

a.  Obtain  a  General  Understanding  of  the  Client  and 
Its  Circumstances 

To  identify  the  unique  characteristics  that  affect 
the  collection  of  evidence,  the  auditor  must  understand  the 
client  and  its  circumstances.  The  general  understanding  in¬ 
cludes  four  categories:  (1)  background  information  on  the 
industry  and  business,  (2)  analytical  tests  to  test  the  reason¬ 
ableness  of  the  financial  statement  balances,  (3)  legal  com¬ 
mitments,  including  government  regulations,  to  determine  what 
is  required  by  law,  and  (4)  information  collected  to  evaluate 
the  possibility  of  management  involvement  in  fraud. 

b.  Study  and  Evaluate  the  System  of  Internal  Control 
The  importance  of  the  audited  organization's  system 

of  internal  control  in  generating  reliable  financial  informa¬ 
tion  is  one  of  the  most  widely  accepted  concepts  in  auditing. 
Internal  control  is  defined  by  the  AICPA  as  "  ...  the  plan  of 
organization  and  all  of  the  coordinate  methods  and  measures 
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Obtain  a  general  understanding  of 
the  client  and  its  circumstances 


adopted  within  a  business  to  safeguard  its  assets,  check  the 
accuracy  and  reliability  of  its  accounting  data,  promote  opera¬ 
tional  efficiency,  and  encourage  adherence  to  prescribed 
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managerial  policies." 

The  first  step  in  evaluating  an  internal  control 
system  is  to  determine  how  the  system  works.  The  second  is  to 
make  a  preliminary  evaluation  of  how  effectively  its  objectives 
are  accomplished,  including  an  assessment  of  the  strengths  and 
weaknesses  of  the  system.  If  after  a  review  of  the  internal 
control  system  the  auditor's  level  of  confidence  is  high,  the 
amount  of  evidence  to  be  accumulated  can  be  significantly 
reduced. 

From  management's  view,  the  following  are  objectives 
of  an  internal  control  system:  (1)  to  provide  reliable  data  for 
decision  making,  (2)  to  safeguard  assets  and  records,  (3)  to 
promote  operational  efficiency,  and  (4)  to  encourage  adherence 
to  prescribed  policies.  In  complying  with  the  second  standard 
of  field  work,  which  concerns  the  evaluation  of  existing  in¬ 
ternal  control,  the  auditor  is  concerned  primarily  with  the 
first  two  of  management's  internal  control  objectives  — 
reliability  of  data  and  safeguarding  assets  and  records  for 
the  purpose  of  fair  presentation  of  financial  statements. 

Arens  and  Loebbecke  have  identified  seven  elements 
of  an  internal  control  system  that  are  required  if  the  four 
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objectives  of  internal  control  are  to  be  met. 


1.  Competent,  trustworthy  personnel  with  clear  lines 
of  authority,  which  is  the  most  important  element 
since  such  personnel  will  perform  with  few  other 
controls  to  support  them  while  the  opposite  is  not 
true . 

2.  Adequate  segregation  of  duties  for  the  prevention 
of  intentional  or  unintentional  errors,  such  as 
separation  of  operational  from  record  keeping 
responsibility,  separation  of  custody  of  assets 
from  accounting,  separation  of  the  authorization 
of  transactions  from  the  custody  of  related  assets, 
and  the  separation  of  duties  within  the  accounting 
function. 

3.  Proper  procedures  for  authorization  for  all  trans¬ 
actions  . 

4.  Adequate  documents  and  records. 

5.  Proper  procedures  for  record  keeping. 

6.  Physical  control  over  assets  and  records. 

7.  Independent  checks  on  performance  with  an  essential 
characteristic  of  independence  from  responsibility 
of  preparation  of  the  data,  such  as  an  internal 
audit  staff. 

c.  Test  the  Effectiveness  of  the  System 

When  a  control  has  been  identified  as  effective 
by  an  auditor,  he  may  rely  on  the  control  and  consequently 
reduce  the  extent  to  which  it  must  be  tested.  To  justify  this 
reliance,  the  effectiveness  of  the  control  must  be  tested  using 
tests  of  compliance.  These  tests  check  if  the  control  is  ap¬ 
plied  consistently,  applied  properly,  and  that  the  person 
responsible  for  the  control  is  independent  of  incompatible 
duties . 


d.  Directly  Test  the  Financial  Statement  Accounts 

The  balances  of  the  different  items  in  the  finan¬ 
cial  statements  should  be  verified  by  the  various  types  of 
evidence  available.  If  the  auditor  has  obtained  a  reasonable 
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level  of  confidence  about  the  fair  presentation  of  the  finan¬ 
cial  statements  through  the  general  review  of  the  internal 
control  and  tests  of  its  effectiveness,  the  direct  tests  of 
balances  can  be  significantly  reduced.  In  all  cases,  however, 
some  tests  of  the  accounts  are  necessary. 

e.  Complete  the  Audit,  Combine  the  Results  of  All  the 
Tests,  and  Draw  Conclusions 

The  auditor  must  combine  with  the  direct  tests  of 
financial  statement  balances  the  results  of  previous  tests, 
and  any  significant  changes  after  the  end  of  the  period  to 
form  an  overall  opinion.  This  is  a  highly  subjective  process 
that  requires  professional  judgement. 

f.  Issue  an  Audit  Report 

The  audit  report  reflects  the  opinion  of  the  audi¬ 
tor  on  the  overall  fairness  of  the  presentation  of  the  finan¬ 
cial  statements  and  is  subject  to  some  well-defined  technical 
requirements  as  to  specific  content.  Such  requirements  con¬ 
sider  the  independence  of  the  auditor,  the  scope  of  the  audit, 
compliance  with  and  consistent  use  of  generally  accepted 
accounting  principles,  and  unusual  uncertainties  affecting  the 
financial  statements. 

6 .  Effect  of  Computer  Systems  on  Auditing 

The  continual  growth  in  the  use  of  computers  for 
accounting  and  financial  applications  makes  an  understanding 
of  the  impact  of  this  use  on  auditing  very  important.  The 
auditing  concepts  applicable  to  computer  applications  and 
those  applicable  to  manual  systems  are  the  same,  but  the 
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specific  methods  to  implement  the  basic  concepts  are 
different . ^ 

The  objective  of  the  review  of  internal  control  in 
a  system  using  a  computer  is  the  same  as  a  manual  system, 
which  is  to  determine  the  audit  evidence  that  should  be 
collected  on  the  basis  of  the  adequacy  of  existing  controls. 

A  general  understanding  of  the  system  is  obtained  from  flow¬ 
charts,  questionnaires,  and  error  listings.  Of  the  three, 
the  only  one  unique  to  a  computer  system  is  the  error  listing, 
which  is  a  list  of  the  actual  errors  reported  by  the  system. 
This  supports  the  other  two,  since  flowcharts  emphasize  the 
organization  of  the  company  and  internal  questionnaires 
emphasize  specific  controls  without  relating  individual  con¬ 
trols  to  one  another.  After  the  preliminary  understanding 
is  obtained,  the  relationship  of  non-computer  controls  must 
be  evaluated  relative  to  computer  controls.  When  the  auditor 
actually  conducts  the  audit,  he  can  audit  around  or  use  the 
computer. 

Auditing  around  the  computer  is  simply  using  the  same 
procedures  as  in  a  manual  system.  This  can  be  done  when 
source  documents  are  available  in  human  readable  form,  the 
documents  are  filed  so  they  can  be  located  for  auditing,  and 
the  output  is  detailed  enough  to  trace  individual  transactions 
from  source  document  to  output  and  vice  versa. 

There  are  two  well-known  methods  to  test  a  system  by 
using  a  computer.  The  first  is  the  use  of  fictitious  or  test 
data  on  currently  used  programs,  with  the  purpose  of  evaluat¬ 
ing  the  capability  to  handle  different  types  of  transactions. 


The  second  is  the  use  of  a  separate  program  to  process  the 
same  transactions  on  the  same  files  to  verify  the  original 
results.  Another  but  more  experimental  method  is  the  estab¬ 
lishment  of  a  separate  entity  with  fictitious  data  to  be 
processed  with  real  data  of  the  audited  organization.  The 
decision  of  which  method  to  use  is  made  by  the  auditor  on 
the  basis  of  professional  experience. 

7 .  Internal  Auditing 


Internal  auditors  are  employed  by  management  in  a 

staff  capacity  to  provide  an  organic  audit  capability.  Arens 

and  Loebbecke  describe  the  difference  between  an  internal 

auditor  and  an  external  auditor  as  the  degree  of  independence 

2  8 

possessed  by  the  latter.  The  Institute  of  Internal  Au- 
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ditors,  Inc.,  (IIA)  is  more  specific: 

Internal  Auditing  is  an  independent  appraisal 
function  established  within  an  organization  to 
examine  and  evaluate  its  activities  as  a  service 
to  the  organization.  The  objective  of  internal 
auditing  is  to  assist  members  of  the  organization 
in  the  effective  discharge  of  their  responsibilities. 

To  this  end,  internal  auditing  furnishes  them  with 
analyses,  appraisals,  recommendations,  counsel,  and 
information  concerning  the  activities  reviewed. 

In  addition  the  responsibilities  of  internal  auditors 
include  providing  information  about  the  adequacy  and  effective¬ 
ness  of  the  organization's  system  of  internal  control  and  the 
quality  of  performance.  In  an  effort  to  assist  internal  au¬ 
ditors  in  the  conduct  of  audits,  the  IIA  has  published  "Stand¬ 
ards  for  the  Professional  Practice  of  Internal  Auditing," 
which  are  applicable  regardless  of  the  organizational  environ¬ 
ment. 
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a.  Standards  for  the  Professional  Practice  of 
Internal  Auditing 

The  IIA  Standards  are  arranged  with  five  general 
Standards,  each  accompanied  by  specific  Standards.  The  five 
General  Standards  include: 

1. )  Independence.  Independence  includes  the 
mental  attitude,  as  in  the  second  AICPA  General  Standard  of 
Generally  Accepted  Auditing  Standards,  but  also  includes 
organizational  status.  Internal  auditing  should  be  respon¬ 
sible  to  an  individual  in  the  organization  that  can  insure 
independence  in  every  aspect  of  the  audit.  In  addition,  the 
head  of  internal  auditing  should  have  direct  communication 
with  the  highest  level  of  management  to  assure  independence 
and  information  flow.  These  conditions  are  made  possible 
through  the  use  of  a  formal  written  document  defining  organi¬ 
zational  position,  access  to  any  required  material/personnel, 
and  the  scope  of  the  internal  auditing  activities. 

2. )  Professional  Proficiency.  This  Standard  in¬ 
cludes  the  same  considerations  as  the  AICPA’ s  first  and  third 
General  Standards  of  the  Generally  Accepted  Auditing  Stand¬ 
ards,  which  concern  training,  proficiency,  and  due  professional 
care.  In  addition,  it  includes  the  first  part  of  the  AICPA's 
first  Standard  of  Field  Work  relating  to  the  supervision  of 
audit  work.  The  IIA's  Standard  includes  the  necessity  of 
evaluating  the  scope  of  work  to  be  done,  the  level  of  respon¬ 
sibility,  and  the  technical  skills  required  for  audits  to  be 
performed.  Included  under  supervision  are  the  requirements 
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for  authorizing  and  justifying  deviations  from  approved  audit 
plans,  complete  working  papers,  and  accurate,  timely  reports. 

Due  professional  care  encompasses  the  use  of  the 
care  and  skill  expected  of  a  reasonably  prudent  and  competent 
internal  auditor.  This  includes  being  alert  to  the  possi¬ 
bility  of  intentional  wrongdoing,  errors  and  omissions,  in¬ 
efficiency,  waste,  ineffectiveness,  and  conflicts  of  interest. 

3. )  Scope.  This  includes  the  examination  and 
evaluation  of  the  adequacy  and  effectiveness  of  the  organiza¬ 
tion’s  system  of  internal  control  and  the  quality  of  perform¬ 
ance  in  carrying  out  assigned  responsibilities.  Essentially, 
this  includes  the  elements  of  the  second  AICPA  Standard  of 
Field  Work  and  the  second  and  third  elements  of  the  overview 
of  the  audit  process  shown  in  Figure  1.  Particular  emphasis 
is  placed  on  management's  objectives  for  its  internal  control 
system,  as  previously  identified  in  the  discussion  on  internal 
control. 

4.  Performance .  Included  in  this  Standard  are 
the  planning  aspect  of  the  first  AICPA  Standard  of  Field  Work, 
the  third  AICPA  Standard  of  Field  Work  relating  to  evidence 
collection,  and  the  first,  fifth,  and  sixth  elements  of  the 
overview  of  the  audit  process  reflected  in  Figure  1.  This 
Standard  also  includes  establishing  audit  objectives  and  scope 
of  work,  writing  the  audit  program,  discussions  with  audited 
management  prior  to  issuance  of  a  report  regarding  conclusions 
and  recommendations,  and  the  requirement  for  follow-up  action 
to  determine  whether  or  not  appropriate  action  is  taken. 
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5.)  Management.  The  first  step  in  the  manage¬ 
ment  of  internal  auditing  is  insuring  that  top  management 
establishes,  with  the  formal  written  document  discussed  in 
Independence,  the  purpose,  authority,  and  responsibility  of 
internal  auditing.  Using  this  information,  plans  should  be 
established  to  fulfill  management's  requirements  and  should 
include  goals,  audit  work  schedules,  staffing  plans  and 
financial  budgets,  and  activity  reports. 

Goals  should  be  measurable  and  have  specific 
criteria.  Audit  work  schedule  priorities  should  take  the 
following  into  consideration:  a.)  the  date  and  results  of 
the  last  audit,  b.)  financial  exposure,  c.)  potential  loss 
and  risk,  d.)  requests  by  management,  e.)  major  changes  in 
the  area  of  concern,  f.)  opportunities  to  achieve  operating 
benefits,  and  g. )  capabilities  of  the  audit  staff. 

Staffing  plans  and  financial  budgets  include  the 
number  of  auditors,  technical  capabilities  required,  and 
financial  resources  required.  These  plans  should  be  deter¬ 
mined  from  the  work  load  required  in  internal  auditing. 

Periodically,  activity  reports  should  be  submitted 
to  top  management  comparing  performance  with  goals  and  audit 
work  schedules,  and  expenditures  with  budgets.  Major  variances 
and  required  action  should  be  explained. 

A  final  internal  auditing  requirement  is  to  de¬ 
velop  a  quality  assurance  program  to  evaluate  internal  audit¬ 
ing  operations  on  the  basis  of  conforming  to  the  Standards, 
the  formal  written  document  from  top  management,  and  other 
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appropriate  standards.  This  is  accomplished  by  continual 
supervision  of  all  internal  audits,  periodic  local  evaluation 
of  internal  auditing,  and  external  appraisals  by  qualified 
persons  independent  of  the  organization  at  least  once  every 
three  years. 

b.  Additional  Considerations 

Lawrence  B.  Sawyer  maintains  that  successful  in¬ 
ternal  auditing  is : 

. . .  constructed  on  a  foundation  of  technical  excel¬ 
lence.  But  the  structure  must  be  firmly  buttressed  — 
on  one  side  by  demonstrated  acceptance  and  support  at 
the  highest  levels  in  the  enterprise;  on  the  other  by 
continued,  imaginative  service  to  management.  Each 
of  the  two  buttresses  is  an  integral  member  of  the 
structure.  Let  one  weaken  and  the  structure  may  tilt, 
ready  to  fall  at  the  first  hard  blow  from  the  winds  of 
retrenchment  and  cost  reduction. 

Sawyer  provides  numerous  tools  and  methods  for 
attaining  such  a  structure.  Three  such  important  tools,  not 
previously  discussed,  are  the  drafting  and  use  of  audit 
manuals,  use  of  audit  programs,  and  preparing  long-range 
programs.  The  first  two  are  guides  in  the  performance  of  an 
internal  audit,  while  the  third  is  an  instrument  with  mul¬ 
tiple  applications. 

1.)  Audit  Manuals.  Audit  manuals  provide  instruc¬ 
tions  and  guidelines  for  the  operation  of  the  internal  audit¬ 
ing  organization.  Such  instructions  can  be  divided  into  three 
groups;  a.)  technical  functions,  b.)  administrative  functions, 
and  c.)  miscellaneous  functions. 

The  technical  audit  manual  covers  technical  func¬ 
tions  and  provides  a  guide  for  the  performance  of  an  audit. 
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It  includes  all  phases  of  the  audit  from  objectives,  theory, 
and  scope  to  the  use  of  audit  programs  and  issuing  reports. 

An  example  of  the  type  of  information  included  in  such  a 
manual  (under  the  topic  audit  programs)  might  include  the 
requirements  for  each  individual  audit  program  to  be  tailored 
to  each  assignment,  and  the  need  to  determine  operating  ob¬ 
jectives,  the  related  required  controls,  and  the  details  of 
the  programs . 

Another  set  of  instructions  needed  to  provide 
guidance  for  areas  related  to  but  not  actually  involved  in 
the  performance  of  internal  audits  is  that  covering  adminis¬ 
trative  functions.  Such  items  that  are  ordinarily  included 
are  instructions  for  office  administration,  personnel,  audit 
projects,  and  audit  reports.  Instructions  under  audit  reports 
might  specify  guidelines  for  interim  reports,  supervisory 
review  of  reports,  and  report  distribution.  The  manual  often 
takes  the  form  of  a  compilation  of  staff  memorandums. 

In  addition  to  the  two  previous  types  of  functions, 
the  third  type  includes  all  that  do  not  fall  in  the  other 
categories.  These  instructions  may  amplify,  explain,  or  re¬ 
strict  statements  in  the  other  manuals  or  may  cover  areas  not 
included  in  the  other  two.  Such  items  as  organization  in¬ 
formation,  auditing  methods  and  techniques  used,  report  formats, 
and  coordinating  instructions  are  included  under  miscellaneous. 

2.)  Audit  Programs.  An  audit  program  is  a  detailed 
plan  of  action  for  the  actual  conduct  of  an  audit.  The  purpose 
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is  to  serve  as  a  guide  and  control  for  an  audit.  It  can  be  a 
pro  forma  type  for  functions  that  are  substantially  the  same 
over  a  long  period  of  time  but  are  usually  tailored  for  a 
specific  audit.  Each  program  should  include  the  theory  of 
the  audit  and  should  be  able  to  determine  if  management's 
objectives  are  being  carried  out  and  whether  adequate  and 
effective  controls  exist  that  will  provide  assurance  that 
objectives  will  be  met. 

3 . )  Long-Range  Programs.  A  good  long-range  pro¬ 
gram  serves  many  purposes.  It  can  be  used  to  spell  out  in 
detail  the  audits  that  are  to  be  conducted,  thereby  simplify¬ 
ing  resource  requirements  and  insuring  that  no  significant 
area  is  overlooked.  It  can  be  used  as  a  justification  for 
budget  allocation.  It  can  also  be  a  valuable  tool  for  justify¬ 
ing  an  increased  staffing  level. 

All  long-range  programs  should  be  approved  by  the 
policy-making  level  of  management.  This  provides  management 
with  a  preview  of  audit  coverage  in  each  area  of  responsibility, 
gives  management  opportunities  to  comment  on  scheduling  and 
coverage,  and  when  accepted,  becomes  a  commitment  by  manage¬ 
ment. 

Such  programs  also  serve  as  standards  for  measur¬ 


ing  audit  performance,  a  control  over  the  actual  operating  of 
auditing,  and  a  notice  to  external  auditors  as  to  the  opera¬ 
tion  of  internal  auditing  within  an  organization. 


4.  Computer  Auditing.  If  possible,  the  time  for 
internal  auditing  to  become  involved  with  computer  operations 
is  during  the  acquisition  process.  Only  at  this  time  can  the 
company's  goals  and  objectives  be  related  to  the  system  that 
is  incorporated.  In  addition,  proper  controls  must  be  built 
into  the  system,  not  added  on  at  some  later  date. 

Additional  considerations  must  be  made  concerning 
computer  security  and  disaster  control,  as  well  as  other  con¬ 
trols,  such  as  operational  controls.  The  increasing  dependence 
on  computer  systems  subject  organizations  to  greater  losses 
or  even  "total  corporate  amnesia"  in  the  event  files  are 
destroyed.  These  controls  include  such  things  as  restricting 
access  to  the  computer  room  and  duplicate,  vital  records 
stored  at  protected,  off-site  locations.  In  addition,  other 
types  of  controls,  such  as  separating  the  personnel  designing 
and  programming  from  the  computer  itself,  can  reduce  possible 
malfunctions  of  the  system  and  improve  its  integrity. 

Thus  far,  this  discussion  has  included  only  concepts 
developed  in  the  private  sector.  The  next  section  discusses 
those  concepts  applicable  to  the  public  sector. 

B.  PUBLIC  SECTOR  —  THE  FEDERAL  GOVERNMENT 

Auditing  in  the  Federal  Government  is  performed  by  the 
General  Accounting  Office  (GAO)  which  reports  directly  to 
Congress.  The  authoritative  compilation  of  GAO's  basic 
policies,  standards,  and  requirements  for  auditing  and  eval¬ 
uating  Government  organizations,  programs,  activities,  and 
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functions  is  published  in  its  Comprehensive  Audit  Manual. ^ 

The  GAO  Manual  For  Guidance  Of  Federal  Agencies  promulgates 

accounting  principles,  standards,  and  related  requirements, 

and  material  for  the  guidance  of  Federal  agencies  in  the 

development  of  their  accounting  systems  and  internal  auditing 

programs;  uniform  procedures  for  use  by  Federal  agencies;  and 

regulations  governing  the  relationships  of  the  GAO  with  other 
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Federal  agencies . 

1.  Purposes  and  Objectives  of  Audits 

There  are  two  primary  purposes  of  audits  in  the  Fed¬ 
eral  government  as  defined  in  the  GAO  Manual  for  Guidance  of 
Federal  Agencies:33  a.)  to  evaluate  the  efficiency,  economy, 
legality,  and  effectiveness  of  Federal  agencies,  and  b.)  to 
assist  Congress  and  Federal  agency  officials  in  carrying  out 
their  responsibilities  by  providing  objective  and  timely  in¬ 
formation,  including  conclusions  and  recommendations. 

Each  agency  is  responsible  for  its  operations,  includ¬ 
ing  management,  development,  and  maintenance  of  adequate  sys¬ 
tems  for  accounting  and  internal  control.  In  evaluating  an 
agency,  the  GAO  will  conduct  an  examination  in  three  broad 
categories : 

a.  Financial  operations  and  legal  compliance 

b.  Efficiency  and  economy  of  operations 

c.  Program  results 

The  financial  operations  and  legal  compliance  audit 
is  similar  in  some  aspects  to  the  private  sector  compliance 
audit  in  that  a  check  is  made  to  insure  all  legal  require¬ 
ments  are  met  in  an  agency's  operations.  It  is  also  similar 
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to  the  financial  statement  audit  in  that  accounting  systems 
and  financial  reports  are  evaluated. 

Audits  of  efficiency  and  economy  are  the  same  as  the 
operational  audit.  Here  operations  are  evaluated  also  in 
the  light  of  applicable  laws  and  regulations. 

Audits  of  program  results  relate  directly  to  programs 
approved  and  funded  by  Congress.  Programs  are  evaluated 
against  established  program  objectives. 

In  evaluating  these  various  categories,  the  GAO  uses 
a  basic  audit  approach. 

2 .  Audit  Approach 

The  following  broad  phases  of  work  are  used  by  GAO  in 
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conducting  an  audit: 

a.  Survey  —  obtaining  working  information  on  the 
activity  or  program  to  be  examined  and  checking 
for  items  that  require  a  closer  evaluation. 

b.  Review  —  detailed  examination. 

c.  Report  —  communication  of  results,  including 
recommendations . 

The  Survey  phase  includes  gathering  general  working 
information,  studying  legislation  applicable  to  the  agency, 
and  preliminary  testing  of  management  controls.  The  first  two 
elements  correspond  to  obtaining  a  general  understanding  of 
the  client  in  the  overview  of  the  private  sector  process.  In 
addition,  preliminary  testing  is  the  same  as  the  study  and 
evaluation  of  the  system  of  internal  control  in  the  overview. 

The  Review  phase  consists  of  detailed  examinations  in 
which  emphasis  is  placed  on  reviewing  and  testing  procedures, 
accounting  systems,  reporting,  internal  review,  and  other 
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elements  of  internal  management  control.  This  corresponds 
to  the  test  of  effectiveness  phase  of  the  private  sector  over¬ 
view,  as  well  as  the  direct  testing  phase.  The  Report  phase 
is  self  explanatory. 

3.  Standards 

The  GAO  in  its  Standards  for  Audit  of  Governmental 
Organizations,  Programs,  Activities  and  Functions  has  published 
a  body  of  audit  standards  applicable  to  all  audits  in  the 
government,^5  These  standards  include  the  Generally  Accepted 
Auditing  Standards  published  by  the  AICPA  but  include  addi¬ 
tional  standards.  The  essence  of  these  additions  are  discussed 
below. 

a.  General  Standards 

The  audit  of  a  government  agency  will  include  an 
evaluation  of  the  three  previously  discussed  types  of  audits 
in  the  government,  financial  and  compliance,  efficiency  and 
economy,  and  program  results.  The  scope  of  each  audit  should 
take  into  consideration  the  needs  of  the  potential  users. 

b.  Examination  and  Evaluation  Standards 

A  review  should  be  made  of  operational  compliance 
with  legal  and  regulatory  requirements.  This  includes  federal, 
and  where  applicable,  state  requirements  and  grant  arrangements. 

Included  in  the  characteristics  of  a  satisfactory 
system  of  internal  control  is  the  inclusion  of  an  effective 
system  of  internal  review,  which  corresponds  to  the  Arens  and 
Loebbecke  seventh  element  of  internal  control  of  "independent 
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The  GAO  Standards  do  not  define  in¬ 


checks  on  performance." 
ternal  review  but  describe  it  as  in  the  nature  of  management 
services  assisting  in  supervising,  advising,  and  reviewing 
designated  functions.  Internal  review  should  be  evaluated 
as  a  part  of  internal  control  to  determine  the  degree  of 
reliance  justified  by  an  auditor. 

The  GAO  Comprehensive  Audit  Manual  does  not  pro¬ 
vide  a  specific  definition  of  internal  review,  either,  but  it 
does  provide  a  more  detailed  description  by  providing  some 
basic  principles  and  policies. ^  In  this  context,  internal 
review  refers  to,  from  an  agency  perspective,  an  independent 
review,  such  as  internal  audit,  of  all  other  elements  of 
management  control.  All  types  of  review  within  an  agency, 
including  internal  audit,  should  be  coordinated  and  the  work 
done  by  each  clearly  defined  to  prevent  duplication  of  effort 
and  jurisdictional  disputes.  It  should  be  noted  that  this 
discussion  relates  to  top  management  at  the  agency  level, 
c.  Reporting  Standards 

Here  the  greatest  differences  between  the  private 
and  public  sector  appear.  In  addition  to  the  standards  con¬ 
cerning  financial  reports,  the  GAO  Standards  require  written 
audit  reports  for  the  arranging  or  requiring  organization, 
officials  responsible  for  action,  others  authorized  to  receive 
the  reports,  and  where  not  prohibited  by  law  or  regulation, 
public  inspection.  These  reports  will  be  made  on  or  before 
the  dates  specified  by  law. 


Each  report  will  be  clear,  concise,  accurate, 


complete,  fair,  objective,  and  factual.  Recommendations  with 
emphasis  on  improvement  and  recognition  of  noteworthy  accom¬ 
plishments  will  be  included.  In  addition,  the  scope  and  ob¬ 
jectives  of  the  audit  will  be  explained,  and  a  statement  will 
be  included  covering  the  reasons  for  any  omitted  significant 
information . 

A  summary  of  these  Government  Audit  Standards  is 

also  included  in  the  GAO  publication  Internal  Auditing  in 
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Federal  Agencies. 

4 .  Internal  Auditing  in  Federal  Agencies 

The  GAO  Manual  for  Guidance  of  Federal  Agencies  in¬ 
cludes  guidance  for  internal  auditing  in  the  federal  govern- 
3  8 

ment.  The  role  of  internal  auditing  is  essentially  the  same 
as  in  the  Private  Sector,  with  emphasis  on  its  function  as  a 
supplement  to  routine  management  checks  on  operations. 

Virtually  all  the  aspects  of  internal  auditing  as 
discussed  in  the  Private  Sector  are  covered  in  the  GAO  Manual 
with  the  following  exceptions:  a.)  audit  work  schedules,  b.) 
staffing  plans  and  financial  budgets,  c.)  activity  reports, 
and  d.)  a  quality  assurance  program.  Even  so,  the  conceptual 
validity  and  applicability  to  government  operations  is  apparent. 

In  addition,  the  chapter  in  the  GAO  manual  on  internal 
auditing  includes  all  the  aspects  covered  in  the  section  on 
auditing  in  the  federal  government.  There  is  additional 
emphasis,  however,  on  efficiency  and  economy  and  program 


results  audits.  There  is  an  emphasis  on  centralization  of 
internal  auditing  at  the  agency  level  with  a  provision  that  a 
separate  staff  may  be  established  at  an  organizational  com¬ 
ponent  of  an  agency.  The  central  internal  audit  activity  of 
the  agency,  however,  should  be  accountable  for  furnishing 
general  policy  direction  and  coordinating  the  efforts  of  such 
a  staff.  The  work  of  such  a  subordinate  staff  should  be 
evaluated  by  the  top  internal  audit  activity.  In  addition, 
the  coverage  by  the  subordinate  staff  should  be  included  in 
the  scope  of  audit  activity  provided  for  top  management. 

5 .  Effect  of  Computer  Systems 

As  in  the  private  sector,  auditing  objectives  remain 
the  same  in  audits  of  organizations  using  computer  systems, 
but  the  procedures  may  be  different.  The  GAO  Comprehensive 
Audit  Manual  places  emphasis  on  the  examination  of  the  func¬ 
tioning  of  the  system  and  validation  of  data  produced  by  the 
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system.  Consideration  should  be  given  to  the  importance  of 
the  data  in  the  organization's  decision-making  process  and 
the  risk  involved  in  using  inaccurate  information.  No  specific 
methodology  is  discussed,  but  emphasis  is  placed  on  control 
procedures  as  part  of  internal  control.  These  procedures  are: 

a.  Plan  of  organization  and  operation  of  the  system 

b.  Procedures  for  documenting,  reviewing,  testing, 
and  changing  and  approving  systems  or  programs 

c.  Controls  built  into  the  hardware 

d.  Control  over  access  to  equipment  and  files 

e.  Application  controls  for  tasks  relating  to 
input,  processing,  and  output 

All  relate  to  the  discussion  of  the  private  sector  concept  of 
understanding  the  systems,  the  computer  controls,  and  non¬ 
computer  controls. 
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The  importance  at  the  agency  level  of  internal  auditing 


as  part  of  internal  control  was  emphasized  with  the  formal 

tasking  of  each  executive  agency  head  for  establishment  of 

appropriate  internal  audit  by  the  Budget  and  Accounting  Pro- 
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cedures  Act  of  1950.  The  Department  of  the  Navy  has  been 
upgrading  its  internal  auditing  since  that  time. 


III.  INTERNAL  AUDITING/INTERNAL  REVIEW 
IN  THE  DEPARTMENT  OF  THE  NAVY 

"Regarding  audit,  the  law  places  responsibility  for  the 
internal  audit  function  under  the  Comptroller  of  the  Depart¬ 
ment  of  Defense,  requires  each  of  the  military  departments  to 

conduct  internal  audits  in  a  manner  consistent  with  that  of 
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the  Comptroller  of  the  Department  of  Defense  ..." 

Additional  authority  for  internal  audits  in  the  Department 
of  the  Navy  was  provided  by  the  Budgeting  and  Accounting  Pro¬ 
cedures  Act  of  1950  in  establishing  appropriate  internal  audit 
as  part  of  effective  control  over  and  accountability  for  all 
resources.  The  Naval  Audit  Service  performs  this  function  for 
the  Department  of  the  Navy  (including  the  Marine  Corps) . 

A.  DEPARTMENT  OF  DEFENSE 
1 .  Audit  Policies 

The  Department  of  Defense  (DOD)  Directive  7600.2, 
"Department  of  Defense  Audit  Policies,"  August  7,  1978,  covers 

the  establishment  of  the  Defense  Audit  Service,  updates  audit 
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policies,  and  clarifies  organizational  responsibilities. 

In  addition,  it  prescribes  basic  policies  for  internal  audits 

for  DOD  and  DOD  Components.  It  provides  that  the  basic  criteria 

for  both  audit  coverage  and  operations  will  be  the  Standards 

for  Audit  of  Governmental  Organizations,  Programs,  Activities 

and  Functions,  which  were  previously  covered  in  the  discussion 

on  the  Public  Sector. 
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The  directive  further  provides  that  the  internal  audit 
responsibilities  for  each  Military  Department,  with  the  excep¬ 
tions  of  Unified  and  Specified  Commands,  will  be  carried  out 
by  a  single  audit  organization.  This  organization  will  report 
to  the  Department  Secretary  or  Under  Secretary  and  will  receive 
technical  guidance  and  supervision  from  the  Assistant  Secretary 
having  financial  management  responsibilities. 

Internal  audit  is  identified  as  having  the  purpose  of 
providing  management  with  an  independent,  objective,  and 
constructive  evaluation  of  the  economy,  efficiency,  and  effec¬ 
tiveness  with  which  managerial  responsibilities  are  being 
carried  out.  It  involves  examining,  evaluating,  and  reporting 
(including  recommendations)  on  any  area  that  has  an  impact  on 
the  use  of  all  types  of  resources  and  the  accomplishment  of 
management  objectives.  Emphasis  generally  will  be  directed 
to  determining  that  management  controls  are  adequate  in  con¬ 
cept  and  effective  in  application. 

2 .  Internal  Audit 

Expanded  guidance  for  internal  audit  is  provided  in 

DOD  Instruction  7600.3,  "Internal  Audit  in  the  Department  of 

Defense,"  January  4,  1974,  over  that  given  in  DOD  Directive 
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7600.2.  All  internal  audit  responsibilities  within  each 
military  department  will  be  fulfilled  by  a  single  internal 
audit  organization  to  assure  independence  and  avoid  duplication. 
In  this  regard,  the  terms  "audit"  and  "auditing"  cover  a 
variety  of  activities,  some  of  which  are  not  considered  as 
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part  of  "internal  auditing"  by  DOD  Instruction  7600.3.  These 
activities  include: 


a.  Administrative  examinations  of  transactions, 
vouchers,  etc.,  which  are  part  of  regular  op¬ 
erations  of  internal  control. 

b.  Inspector  General  and  Procurement  Management 
Review  Program  inspections  and  investigations. 

c.  Technical  surveys  and  inspections  by  various 
staff  elements  in  performance  of  their  nor¬ 
mally  assigned  duties. 

d.  Internal  review  at  lower  echelons. 

In  addition  responsibility  for  audit  of  nonappro- 
priated  fund  activities  may  be  delegated  to  lower  management 
levels . 

a.  Internal  Audit  Responsibilities,  Mission,  and 

Scope 


Internal  auditing  is  a  staff  function  whose  res¬ 
ponsibilities  include  examining,  observing,  reviewing  and 
evaluating  all  aspects  of  management  for  the  purpose  of  re¬ 
porting  findings  and  making  recommendations.  Management 
responsibilities  remain  with  management.  The  heads  of  internal 
audit  organizations  will  develop  and  execute  plans,  policies, 
procedures,  and  programs  necessary  to  discharge  internal  audit 
responsibilities . 

Internal  audit  is  the  independent  review  and 
evaluation  of  the  effectiveness  and  efficiency  of  management. 

It  is  an  independent  appraisal  that  is  directed  toward  deter¬ 
mining  that  management  controls,  practices,  and  procedures 
are  adequate  in  concept  and  effective  in  application.  It 


should  insure  that  such  controls  provide  for  adequate  finan¬ 
cial  integrity  and  effective  utilization  of  resources, 
b.  Audit  Approach 

Internal  audit  activities  should  be  directed 
toward  identifying,  reporting,  and  making  appropriate  recom¬ 
mendations  regarding  conditions  concerning  inefficiency,  de¬ 
ficiency,  and  errors.  The  primary  consideration  should  be 
the  prevention  of  deficiencies  with  secondary  concern  for 
detection  of  past  deficiencies.  Detailed  examination  will 
be  limited  to  the  extent  necessary  as  revealed  by  appraisal 
of  the  system  of  internal  control. 

Contrary  to  the  concept  of  auditing  in  the  private 
sector,  where  the  purpose  is  reliability  of  financial  state¬ 
ments,  the  principal  purpose  of  internal  auditing  ordinarily 
will  be  to  appraise  the  effectiveness  of  management.  If 
management  controls  and  the  accounting  system  are  effective, 
reliance  can  generally  be  placed  on  the  financial  statements 
produced. 

3 .  Internal  Review 

"Management  at  lower  echelons  is  not  precluded  from 
establishing  groups  which,  while  not  performing  independent 
or  comprehensive  audits,  would  serve  as  ’troubleshooters' 
who  make  special  analyses  in  comptroller  and  other  areas  and 
assist  in  correcting  deficiencies  which  are  revealed  by  audits 
reports,  analyses,  observations  or  other  means.  In  authoriz¬ 
ing  such  internal  review  activities  at  any  echelon,  care 
should  be  exercised  to  assure  avoidance  of  duplication  of 


internal  audit  functions  as  defined  below  which  are  assigned 
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to  the  centralized  audit  organizations." 

The  above  quote  and  the  internal  audit  functions  to 

which  it  refers  are  included  in  Appendix  A.  The  precise 

meanings  of  the  term  "internal  review,"  its  appropriate 

elements  and  relation  to  internal  auditing  are  presently  under 

debate  and  a  matter  of  controversy,  as  is  the  meaning  of 
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"duplication  of  internal  audit  functions." 

A  draft  copy  of  the  Study  of  the  Operations  and 

Relationships  of  Audit,  Inspection  and  Review  Groups  in  the 

Department  of  Defense  of  3  November  1978  by  the  Department 

of  Defense  Joint  Study  Group  on  Audits,  Inspections  and 
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Reviews  reveals  some  of  the  complexities  involved.  The 
study  of  internal  review  was  from  the  perspective  that  the 
only  activities  authorized  were  strictly  limited  to  special 
analyses  in  comptroller  and  related  areas  and  assisting  in 
correcting  deficiencies  discovered  by  means  other  than 
internal  review,  "he  study  found  that  there  was  no  common 
understanding  of  the  meaning  of  internal  review  and  concept 
authorized  by  DOD  Instruction  7600.3.  The  fourth  alternative 
provided  by  the  study  was  to  clarify  DOD  policy  to  explicitly 
define  and  limit  the  functions  of  internal  reviewers.  This 
alternative  was  not  recommended,  because  local  commanders 
need  to  have  professional  auditors  available  and  the  Army  and 
Navy  had  not  followed  DOD  audit  policy  in  the  past.  The 
study  found  that  the  Marine  Corps  was  at  that  time  following 
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policy  and  did  not  duplicate  the  work  of  the  Naval  Audit 
Service  but  did  not  meet  audit  standards.  The  Army  was  found 
to  produce  the  highest  quality  work  of  the  services  with 
internal  review  but  duplicated  the  type  work  of  the  Army  Audit 
Agency.  The  two  recommended  alternatives  were  to  consolidate 
existing  internal  review  assets  with  the  internal  audit  or¬ 
ganization  or  authorize  internal  reviewers  to  function  as 
local  internal  auditors  by  revising  DOD  policies.  The  first 
alternative  was  preferred  due  to  the  advantages  of  centralized 
control. 

Within  the  framework  established  by  the  first  para¬ 
graph  in  this  discussion  of  internal  review  and  surrounded  by 
the  lack  of  common  understanding  of  the  meaning  and  concept 
of  the  functions  of  internal  review  activities  authorized  by 
DOD,  the  Military  Departments  were  to  establish  internal 
review,  if  desired. 

B.  DEPARTMENT  OF  THE  NAVY 

In  accordance  with  policy  established  by  DOD,  the  Naval 
Audit  Service  (NAVAUDSVC)  performs  the  internal  audit  func¬ 
tion  for  the  Department  of  the  Navy  as  directed  by  the  Navy 
Comptroller  (NAVCOMPT)  Manual  Volume  I.  This  directive  also 

designates  internal  review  as  a  responsibility  of  Command  to 
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be  performed  at  all  installations. 

1.  Internal  Audit 

The  Secretary  of  the  Navy  Instruction  (SECNAVINST) 
7510. 7A,  Department  of  the  Navy  Audit  Manual  for  Management, 
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28  December  1978,  prescribes  policies  and  procedures  for  the 
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management  of  audit  in  the  Department  of  the  Navy.  The 
stated  purpose  of  internal  audit  in  the  Department  of  the  Navy 
is  the  same  as  that  which  is  established  by  DOD  Directive 
7600.2  and  DODINST  7600.3.  This  is  to  be  accomplished  through 
objective  reports,  constructive  recommendations,  and  consulta¬ 
tion  for  management  in  planning  action  on  findings  and  recom¬ 
mendations.  This  emphasis  on  assistance  to  management  has 
resulted  in  the  Secretary  of  the  Navy  (SECNAVj  policy  to 
conduct  internal  audits  on  a  mission-oriented  basis.  That  is, 
every  aspect  of  each  audit  is  to  be  guided  by  the  mission  of 
the  audited  organization,  so  that  those  functions  of  primary 
concern  to  management  at  all  levels  will  receive  audit  atten¬ 
tion.  In  addition,  supplementary  coverage  is  provided  by 
fiduciary-type  audits,  such  as  disbursing  and  commissary 
stores,  and  Morale,  Welfare,  and  Recreation  fund  activities. 
The  same  auditing  principles,  policies,  standards,  and  pro¬ 
cedures  that  apply  to  internal  audit  also  apply  to  internal 
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review. 

2 .  Internal  Review 

The  policy  and  guidelines  for  Internal  Review  in  the 
Department  of  the  Navy  are  prescribed  by  SECNAVINST  7510.8, 
"Internal  Review  in  the  Department  of  the  Navy,"  15  October 
1976.  It  is  the  policy  of  the  Secretary  of  the  Navy  that 
Internal  Review,  as  a  fundamental  element  of  comptrollership, 
be  implemented  to  insure  proper  administration  and  utiliza¬ 
tion  of  resources. ^ 


J 
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a. 


Definition  and  Discussion 


"Internal  Review  is  the  conducting  of  special 
audits,  studies,  analyses  and  investigations  of 
financial  operations  and  the  use  of  command  re¬ 
sources  to  detect  deficiencies,  improprieties  and 
inefficiencies,  and  to  provide  recommendations  in 
order  to  correct  conditions  that  adversely  impact 
on  financial  management,  mission  accomplishment, 
or  the  integrity  of  command."^1- 

This  definition  adds  to  the  uncertain  discussion 
of  internal  review  in  DODINST  7600.3,  which  was  previously 
discussed.  "Special  analyses"  have  been  expanded  to  include 
"special  audits,  studies  ...  and  investigations."  Internal 
review  also  now  includes  detection  of  deficiencies  in  addi¬ 
tion  to  their  correction.  The  DOD  discussion  includes  "  ... 
care  should  be  exercised  to  assure  avoidance  of  duplication 
of  internal  audit  functions  ...,"52  while  SECNAVINST  7510.8 
states  "Internal  Review  may  complement  but  not  intentionally 
duplicate  the  responsibility  of  centralized  audit  organiza¬ 
tions  such  as  the  Navy  Audit  Service,  and  as  first  priority 
should  always  serve  command.  In  addition,  guidance  is 

added  that  reviews  should  be  independent,  thorough,  profes¬ 
sional,  and  detailed  so  that  duplicative  reviews  by  auditors 
external  to  the  command  can  be  minimized. 

Resources  for  performance  of  internal  review  will 
be  made  available  from  within  available  resources.  Planning 
will  be  subject  to  semiannual  command  review  and  approval 
insofar  as  practical.  Also,  various  headquarters'  elements 
may  issue  supplementary  guidance  to  subordinate  commands  to 
insure  compliance  with  SECNAVINST  7510.8.  Flexibility  will 
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be  planned  so  special  reviews  can  be  scheduled  to  be  respon¬ 
sive  to  special  circumstances, 
b.  Functions 

Internal  review  will  normally  be  implemented  at  a 

field  activity  by  the  Comptroller  for  the  Commanding  Officer. 

"Internal  Review  will  be  responsible  for  examining  internal 

management  controls,  practices,  and  procedures  at  all  levels 

to  determine  adequacy  in  concept  and  effectiveness  in  applica- 
54 

tion."  This  is  almost  an  exact  repeat  of  the  description 
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given  of  internal  audit  in  DODINST  7600.3.  Both  also  in¬ 
clude  the  need  to  provide  for  financial  integrity  and  effec¬ 
tive  use  of  resources.  Included  in  the  SECNAV  instruction 
are: 


1. )  Audit  of  civilian  timekeeping  and  payroll  and 

certain  nonappropriated  funds. 

2. )  Monitoring  correction  of  deficiencies  revealed 

by  agencies  external  to  the  command. 

3. )  Monitoring  and  evaluating  financial/accounting 

systems  and  procedures  with  emphasis  on  audit 
trails  and  other  management  controls. 

4. )  Designing  and  using  audit  check  lists  unique 

or  critical  to  the  command  in  safeguarding 
resources . 

5. )  Review  controls  and  changes  for  resource 

account abi 1 i ty . 

6. )  Participate  in  reviews  of  other  problem  areas. 

7. )  Maintain  liaison  with  external  audit/inspection 

agencies . 

c.  Staffing 

Successful  implementation  of  Internal  Review 
requires  competent,  experienced  personnel  on  a  permanent  or 
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ad  hoc  basis,  depending  on  the  needs  and  characteristics  of 
the  command.  Local  staffing  and  training  criteria  should 
include : 

1. )  A  nucleus  consisting  of  an  interdisciplinary 

group  with  financial  management  skills  and 
the  dominant  technical  skill  represented  by 
the  command. 

2. )  The  specific  staffing  requirements  should  be 

based  on  the  needs  and  characteristics  of  the 
command.  At  present,  there  are  no  objective 
criteria  provided  or  available  to  determine 
what  appropriate  staffing  should  be. 

3. )  Since  Internal  Review  provides  an  invaluable 

training  ground  for  development  of  future 
financial  management  talent,  training  should 
include  not  only  auditing  but  areas  of  manage¬ 
ment  interest.  Training  course  and  materials 
are  the  responsibility  of  the  Auditor  General 
of  the  Navy. 

d.  Audit  Process 

The  Introduction  to  Navy  Audit  and  Internal 
Review  Text  addresses  the  conduct  of  an  audit  as  related  to 

Time  constraints  and  staffing  will  deter- 
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internal  review 
mine  the  scope  and  type  of  review  conducted,  but  to  some 
extent,  every  audit  process  should  address  the  following. 


1.)  Audit  Planning  and  Scheduling.  Annual  plans 
should  be  made  by  soliciting  audit  proposals  from  the  various 
departments  of  the  activity.  Proposals  should  be  identified 
as  to  type  of  audit  required  and  priorities  assigned.  Man¬ 
hour  estimates  should  be  made  and  the  plan  prepared,  with 
any  proposals  left  over  kept  in  a  deferred  status.  The  plan 
should  be  published  and  distributed  to  all  concerned. 
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2. )  Opening  Conference.  This  is  a  meeting  to 
convince  management  of  the  value  of  the  upcoming  review  and 
to  acquire  various  types  of  background  information,  such  as 
organization,  policies,  etc.  This  corresponds  to  a  segment 
of  the  Survey  Phase  of  the  GAO  approach  and  background  in¬ 
formation  of  the  overview  in  the  private  sector. 

3. )  Activity/Area  Designated  for  Audit.  This  is 
defining  the  audit  environment  to  aid  in  preparation  of  the 
audit.  This  can  be  characterized  as  an  addition  to  the  Sur¬ 
vey  and  overview  discussed  above. 

4. )  Preaudit  Survey.  The  objective  of  the  sur¬ 
vey  is  to  identify  areas  requiring  close  audit  examination, 
determine  areas  that  generally  appear  satisfactory  so  that 
unnecessary  coverage  can  be  avoided,  and  develop  specific 
audit  plans  and  objectives.  The  auditor  is  concerned  pri¬ 
marily  with  evaluating  management  controls  and  ways  to 
improve  them.  This  corresponds  to  the  preliminary  testing 
in  the  GAO  Survey  Phase  and  the  study  and  evaluation  of  the 
system  of  internal  control  and  test  of  effectiveness  phases 
in  the  Private  Sector  overview. 

5. )  Audit  Program.  Audit  programs  in  this  case 
are  the  same  as  discussed  in  the  section  of  internal  auditing 
in  the  Private  Sector.  They  are  standardized  checklists  for 
specific  functional  areas  and  are  particularly  helpful  to 
inexperienced  auditors  but  are  not  substitutes  for  judgement. 
The  Naval  Audit  Service  has  developed  an  extensive  list  of 
such  programs . 
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6.)  On-site  Examination.  This  is  the  actual  con¬ 


duct  of  the  audit,  which  corresponds  to  the  GAO  Review  Phase 
and  the  Private  Sector  overview  Direct  Test  Phase. 

7. )  Working  Papers.  Working  papers  are  a  con¬ 
structive,  historical  record  of  all  parts  of  the  audit  per¬ 
formed  and  must  be  complete. 

8. )  Findings .  Clear,  correct,  concise,  and  con¬ 
vincing  findings  constitute  a  significant  factor  in  the  success 
of  any  audit,  as  noted  in  the  Government  Standard  of  Report¬ 
ing.  Figure  2  is  a  schematic  that  succinctly  presents  the 

key  elements. 

9. )  Audit  Utilization.  Audit  utilization  refers 
to  the  process  of  insuring  that  management  uses  the  results 

of  the  audit.  This  is  accomplished  by  discussing  with  manage¬ 
ment  any  significant  findings  at  the  time  of  their  discovery, 
as  well  as  a  review  by  the  audited  organization  of  the  draft 
report.  This  review  is  to  verify  facts  supporting  the  find¬ 
ings,  determine  preliminary  action  taken,  if  any,  and  deter¬ 
mine  planned  action  and  target  dates. 

10.)  Audit  Report.  The  report  is  the  formal 
record  of  the  audit  distributed  to  local  management.  In 
addition  to  the  findings,  it  should  include  a.)  statements  of 
concurrence  or  nonconcurrence  by  audited  management  with 
findings  and  recommendations,  b.)  actions  taken,  c.)  actions 
planned  with  target  dates,  and  d.)  when  applicable,  items  of 
dispute,  including  the  position  of  the  department  head  or  a 
statement  that  an  item  requires  action  by  higher  authority. 
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Figure  2 


SCHEMATIC  DESCRIPTION  OF 
A  TYPICAL  FINDING 


Major  Theme 

(Expression  of  auditor's  overall 
point  of  viev--3rief  statement 
of  all  the  attributes) 


i  Background  and  Crite 


Condition,  Effect,  and  Cause 
that  support  the  Major  Theme 


SECNAVINST  75L0.8  requires  that  all  internal  review  reports 
be  submitted  to  the  Commanding  Officer  via  the  intermediate 
managers  and  that  an  effective  followup  program  is  needed. 

e.  Internal  Review  in  the  Marine  Corps  —  Differences 
At  the  present.  Marine  Corps  Order  7540.2,  "Inter¬ 
nal  Review,"  27  September  1976,  is  in  effect  but  will  soon  be 

SR 

superceded  by  Marine  Corps  Order  7540. 2A.  ' 

The  present  Order  is  concerned  with  financial 
resources  and  the  financial  munaoement  responsibilities  ot 
commanders  to  insure  commitment  of  resources  in  accordance 
with  prescribed  statutory  requirements  and  policies  and  pro¬ 
cedures  of  the  Commandant  of  the  Marine  Corps.  In  addition, 
it  does  not  include  as  many  procedures  and  guidelines.  The 
followinq  discussion  will  bo  concerned  with  t ho  new  order. 
Chanqes  in  requirements  will  be  noted,  as  will,  differences 
with  previously  discussed  directives.  The  new  order  refer¬ 
ences  SECNAVINST  7510.8,  which  was  published  subsequent  to 
the  issuance  of  the  present  Order. 

Internal  review  will  soon  include  t  lie  assessment 
of  the  use  of  all  command  resources;  o.u.,  appropriated  funds, 
command  property,  materials  and  supplies,  which  is  a  chatuie. 
Internal  review  staffs  will  provide  support  to  all  installa¬ 
tion  activities  and  orqanizat  ions ,  including  tenant  organiza¬ 
tions  without  an  internal  review  staff.  Emphasis  will  be  on 
the  effectiveness  of  internal  controls  and  reoommondat ions 
for  the  correct  ion  of  do f io ieno ies ,  the  latter  of  which  is 


an  additional  emphasis.  Subsequent  to  corrective  action,  a 
follow-on  review  shall  be  conducted  to  insure  conditions  have 
been  corrected.  The  submission  of  an  information  copy  of 
the  annual  internal  review  program  to  Headquarters  has  been 
changed  to  within  45  days  of  the  end  of  the  fiscal  year 
vice  formulation.  A  copy  of  command  directives,  or  revisions, 
implementing  the  new  order  will  be  submitted  to  Headquarters. 

1. )  Audit  Liaison  and  Followup.  Detailed  infor¬ 
mation  is  provided  concerning  matters  relating  to  audits/ 
reviews  by  agencies  external  to  the  command. 

2 .  )  Constructing  the  Annual  Internal  Review 
Program.  Program  development  will  include  revalidated  pro¬ 
jects  from  the  previous  period  with  a  high  priority,  such  as 
those  revealed  by  an  audit  of  an  agency  external  to  the 
command.  Staff  and  subordinate  elements  should  also  recom¬ 
mend  projects,  as  noted  in  the  Navy  Audit  Process.  Sufficient 
time  will  be  reserved  for  follow-up  reviews  to  insure  correc¬ 
tive  action  has  been  taken.  A  portion  of  the  manhours  avail¬ 
able  will  be  reserved  for  urgent  unforeseen  requirements,  not 
to  exceed  20  percent  of  the  estimated  manhours  available  (the 
20  percent  is  a  new  limitation) .  The  program  will  include 

as  a  minimum:  a.)  requesting  staff  office  and  point  of 
contact  (a  new  requirement),  b.)  reason  for  review,  c.)  ob¬ 
jectives  and  scope  of  review,  d.)  summary  or  checklist  of 
procedures,  e.)  milestones  and  estimated  manhours,  and  f.) 
previously  noted  deficiencies.  A  new  requirement  is  for  the 


55 


comptroller  to  forward  the  proposed  annual  program,  with 
recommended  priority  ranking,  to  the  Commanding  Officer  for 
approval.  (SECNAVINST  7510.8  designates  a  semiannual  review 
and  approval  by  commanders,  insofar  as  practical.)  Con¬ 
sideration  should  be  given  to  areas  outside  comptroller 
functions.  Also  new  is  an  encouragement  to  forward  to  Head¬ 
quarters  a  copy  of  completed  internal  review  reports,  espe¬ 
cially  those  with  Marine  Corps-wide  application. 

3. )  Performing  the  Review.  The  Preliminary 
Actions  prescribed  correspond  to  the  Navy  Preaudit  Survey, 

GAO  Survey,  and  the  background  and  preliminary  testing  in  the 
private  sector  overview  plus  a  requirement  to  evaluate  per¬ 
sonnel  available  for  the  review.  When  needed,  the  comptrol¬ 
ler  should  request  augmentation  by  functional  or  technical 
personnel  within  the  command.  The  performance  of  the  review 
corresponds  to  the  review,  examination,  and  direct  testing 
previously  discussed.  Documentation  is  emphasized,  and 
detailed  instructions  are  given  for  reporting  the  results  in 
a  formal  manner  (a  new  requirement) .  The  report  should  in¬ 
clude  a  selection  of  alternatives  so  the  commander  has  the 
greatest  degree  of  latitude  and  should  be  issued  no  later 
than  30  days  after  completion  of  the  review.  It  is  the 
responsibility  of  the  comptroller  to  insure  the  commander  is 
apprised  of  internal  review  results. 

4. )  R.S .  3679 .  Detailed  information  is  provided 
regarding  administrative  control  of  appropriations  (a  new 
section) . 
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5.)  Timekeeping  and  Civilian  Payrolls.  Guidance 
is  provided  regarding  the  conduct  of  the  review  required  by 
NAVCOMPT  Manual,  Volume  I,  and  assigned  to  internal  review 
by  MCO  7540.1. 

The  staffing  of  internal  review  will  be  from 
within  available  manpower  authorizations  and  funding.  A 
report  will  be  made  to  Headquarters,  with  the  annual  internal 
review  program,  providing  the  rank/grade  and  military  occupa¬ 
tional  specialty/series  of  authorized  and  assigned  positions 
in  internal  review.  At  the  present  time  no  criteria  have 
been  established  to  determine  staffing  requirements;  rather, 

staffing  is  determined  at  present  by  the  workload  planned  and 

59 

performed  by  the  internal  review  function. 

Internal  auditing  is  stressed  in  DOD,  and  internal 
review  is  "mentioned."  In  the  Department  of  the  Navy,  inter¬ 
nal  auditing  has  been  continually  emphasized.  Internal  Re¬ 
view  is  now  emphasized,  though  only  recently.  The  growth  of 
Internal  Review  has  been  the  result  of  an  effort  to  provide 
commanders  with  an  increased  review  capability  over  that 
provided  by  the  Naval  Audit  Service  every  3  to  5  years,  depend¬ 
ing  on  the  command. ^ 
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IV.  CASE  STUDY 


MCAS 


A.  THE  AIR  STATION 

The  Marine  Corps  Air  Station  (MCAS)  supports  both  tenant 
and  transient  aviation  units  and  detachments.  In  addition  to 
the  5  tenant  aviation  units,  the  MCAS  provided  support  for 
34  rotational  units  with  552  aircraft  and  7,574  personnel 
during  the  last  fiscal  year.  An  additional  16,704  transient 
aircrewmen  stopped  at  the  MCAS  for  services. 

The  Fiscal  Year  1979  budget  for  the  MCAS  totalled  over 
$48  million,  including  just  over  $11  million  for  Station 
Operation  and  Maintenance,  Marine  Corps,  funds.  The  com¬ 
manders  of  scheduled  rotational  units  are  expected  to  provide 
around  $5  million  for  anticipated  aircraft  maintenance  support. 
(See  Table  I) 

B.  INTERNAL  REVIEW 

Internal  Review  was  established  in  June  1976  as  a  train¬ 
ing  billet.  That  is,  an  Auditor  Trainee,  GS-510-05,  was 
hired  and  entered  a  24-month  training  program.  Subject  to 
evaluation  at  6-month  intervals,  the  trainee  was  scheduled 
to  advance  to  GS-07  at  the  end  of  12  months  and  subsequently 
to  GS-09  after  24  months.  Training  was  to  be  on  the  job  and 
guided  by  the  Deputy  Controller. 

1.  Organization 

The  Internal  Review  function  at  the  MCAS  has  been 
organized  as  a  division  of  the  Comptroller  Department,  as 
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Table  I 


MCAS  Budget  Distribution 
FY  1979 


FY  1979 
AUTHORIZATION 

Operation  &  Maintenance,  Marine  Corps  $11,619,530 
Family  Housing  Defense  2,164,269 

Total  Other  Reimbursements*  5,640,802 

Grand  Total  Expense  Operating  Budget  $19,424,601 

Total  Miscellaneous  Allotments  881,408 

Marine  Corps  Stock  Fund  $  3,325,000 

Marine  Corps  Trust  Funds  131,350 

Navy  Stock  Fund  24, 349, 294 

Total  All  Funds  27,805,644 

Overall  Grand  Total  $48 , 111 , 653 


*Includes  $5  million  for  maintenance  support  of  rotational 
units . 


Source:  MCAS  FY  1979  Budget 
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shown  in  Figure  3.  The  job  description  includes  the  conduct 
of  periodic  and  special  efforts  to  evaluate  the  effectiveness 
of  the  Station  financial  management  systems,  as  well  as  all 
phases  of  their  installation.  It  also  specifies  responsibil¬ 
ity  to  review  accounting  procedures,  recommendations  on  or¬ 
ganization  and  staffing  in  the  Comptroller's  Office,  the 
maintenance  of  funds  allocated  to  the  Comptroller's  Office, 
plus  liaison  duties  with  external  agencies.  An  additional 
duty  to  select  and  prepare  Cost  Reduction  submissions  is  also 
assigned.  No  official  local  directive  assigning  responsibil¬ 
ities  to  Internal  Review  has  been  published,  but  letters  of 
appointment  are  drafted  for  such  functions  as  the  audit  of 
funds  issued  to  Imprest  Fund  Cashiers.  The  Audit  Verifica¬ 
tion  Board,  composed  of  one  officer  and  the  one  member  of 
internal  review,  was  established  for  such  audits  as  the  cash 
count  in  Disbursing  and  audit  of  subfunds. 

2 .  Staffing 

The  first  trainee  to  hold  the  internal  review  position 
left  the  job  after  about  a  year  for  other  employment.  His 
replacement  holds  the  position  today  as  a  GS-09.  Before 
coming  to  this  job,  the  incumbent  worked  for  18-1/2  years  as 
an  internal  auditor  for  General  Electric.  He  has  an  account¬ 
ing  degree  and  has  expressed  an  eagerness  to  pursue  every 
opportunity  to  increase  his  effectiveness.  The  Internal 
Review  Division  has  a  recognized  requirement  of  two  personnel 
but  to  date  has  only  one  person  assigned.  (See  Appendix  D.) 
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Figure  3 

Comptroller  Department  Organization 


Appendix  F>  is  the  training  plan  established  to  ful¬ 
fill  tha  training  program  previously  discussed.  The  training 
is  financial  management  oriented.  It  covers  Accounting  Divi¬ 
sion  operations,  budgeting  at  the  cost  center  and  station 
levels,  Comptroller  Department  operations,  including  the 
financial  section  of  the  Public  Works  Department,  Cost  Center 
management,  and  Supply  operations.  Evaluations  are  provided 
at  six-month  intervals  and  sent  to  the  Comptroller.  In  addi¬ 
tion  to  completion  of  the  training  program,  the  incumbent 
spent  six  weeks  in  1977  with  an  audit  team  of  the  Naval  Audit 
Service,  learning  audit  routines. 

3 .  Program 

An  annual  Internal  Review  Program  is  required  by 
MCO  7540.2.  Appendix  C  is  the  MCAS  report  on  the  Fiscal 
Year  1979  Program.  It  has  been  constructed  to  comply  with 
MCO  7540.2  and  with  the  guidance  provided  by  DODINST  7600.3 
to  avoid  the  duplication  of  the  internal  audit  functions. 

The  Program  was  constructed  by  first  identifying  reviews 
required  by  higher  authority,  such  as  audit  of  Imprest  Funds. 
Then  projects  proposed  by  the  various  departments  in  the 
activity  were  added.  A  reserve  of  manhours  was  scheduled 
for  unforeseen  problems  ("troubleshooting"  capability) . 

A  large  portion  of  the  reviews  scheduled  and  per¬ 
formed  are  the  fiduciary  type.  Appendix  D  is  the  report  of 
reviews  for  the  first  six  months  of  Fiscal  Year  1979.  The 
remaining  reviews  are  concerned  primarily  with  financial 
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management  issues,  both  those  performed  and  scheduled.  Dur¬ 
ing  an  approximate  two-month  period  this  past  budget  cycle, 
the  internal  review  incumbent  spent  most  of  his  time  assist¬ 
ing  in  the  zero  base  budget  construction.  This  provided 
training  for  him  and  filled  a  manpower  need  in  budgeting.  The 
"As  Assigned/Required"  part  of  the  scheduled  program  absorbed 
the  loss  of  manhours.  The  "troubleshooting"  assignments  that 
have  been  performed  include  an  investigation  concerning  the 
difficulty  in  obtaining  cable  for  the  runway  arresting  gear. 
This  represents  an  immediate  response  capability  for  the 
commander  to  changing  conditions. 

4 .  Approach  to  the  Conduct  of  a  Review 

As  discussed  in  the  previous  section,  the  areas  for 
reviews  to  be  conducted  are  established  by  the  Commanding 
Officer,  requests  from  departments,  or  as  directed  by  higher 
authority.  These  reviews  have  historically  been  almost 
exclusively  financial  management  or  fiduciary  oriented. 

The  first  step  in  a  typical  review  is  the  research  of 
pertinent  directives  to  determine  what  checks  of  compliance 
need  to  be  made.  A  list  of  points  to  check  is  made  to  use 
in  the  same  way  an  audit  program  is  used  for  audits  of  the 
civilian  payroll.  Then,  personnel  who  are  part  of  the  area 
being  reviewed  are  interviewed  and  observed.  Specific  points 
of  compliance  are  noted,  as  are  additional  problems  that 
arise. 

When  the  review  covers  an  area  with  detailed  doc¬ 


umentation,  such  as  vouchers,  a  system  is  devised  to  test  the 


transactions.  For  areas  that  involve  only  a  few  items,  such 
as  about  40,  a  census  is  made.  The  approach  for  areas  with 
a  large  number  of  transactions,  however,  involves  sampling 
about  20  to  25  percent  of  the  population,  depending  on  the 
reviewer's  judgement.  A  typical  procedure  would  be  to  inspect 
every  fourth  document.  When  a  discrepancy  is  noted,  a  larger 
sample  or  census  is  taken.  As  an  example,  during  a  recent 
verification  of  cash  held  in  Disbursing,  a  several  hundred 
dollar  shortage  was  discovered,  and  every  document  processed 
by  the  section  for  the  period  of  time  since  the  last  verifica¬ 
tion  was  traced  through  the  system.  The  case  is  still  under 
investigation  by  authorities.  Such  verifications  of  cash 
balances  are  done  on  an  unscheduled  basis  to  improve  the 
representativeness  of  the  count.  The  Internal  Review  in¬ 
cumbent  has  been  involved  in  the  actual  counting  of  cash. 

The  majority  of  the  reviews  now  conducted  concern 
the  computer  reports  generated  by  the  automated  accounting 
system  for  appropriated  funds.  Since  the  automated  system 
has  been  installed,  control  over  obligated  funds  has  been 
improved.  However,  there  has  been  a  continuing  problem  of 
differences  in  the  records  of  the  requisitioning  activity, 
supply,  and  accounting.  In  addition  to  the  normal  document 
flow,  the  use  of  telauto-writer  equipment  has  further  ag¬ 
gravated  the  problem,  because  quite  often  the  originator 
receives  notice  of  a  cancellation  but  the  accounting  section 
does  not.  This  presents  a  significant  problem  at  the  end 


64 


. - .. 


immutm  m  \  ate aife? 


of  the  fiscal  year.  For  these  reasons,  Internal  Review 
spends  a  considerable  amount  of  time  researching  such  prob¬ 
lems.  Appendix  E  is  the  report  for  just  such  a  review.  The 
results  show  that  efforts  during  the  review  were  directed  at 
obtaining  a  status  of  funds  with  recommendations  concerning 
future  actions  regarding  the  status  of  funds.  Another  recent 
review  resulted  in  clearing  over  $1  million  from  the  books, 
providing  a  significant  reduction  in  the  amount  of  associated 
paperwork.  One  of  the  major  problems  concerning  the  differen¬ 
tial  in  records  of  various  departments,  which  was  not  explic¬ 
itly  identified  in  the  report,  is  the  problem  of  personnel 
turnover  at  the  document-generating  level  of  the  various 
departments.  This  situation  requires  a  constant  retraining 
process  that  is  accompanied  with  associated  errors.  This 
problem  has  been  addressed  by  numerous  meetings  of  management 
to  attempt  to  produce  a  solution. 

Another  type  of  review  that  is  common  is  the  conduct 
of  research  to  determine  the  effect  of  changes  in  codes  used 
to  account  for  funds.  This  information  is  then  used  to 
reconcile  the  department's  records  with  those  of  accounting. 
Here  again,  personnel  turnover  appears  as  a  problem  in  terms 
of  knowledge  and  experience. 

The  reporting  of  the  results  of  the  internal  reviews 
performed  is  primarily  on  an  informal  basis.  Affected 
management  is  briefed  with  the  information  produced  by  the 
review.  The  Comptroller  is  made  aware  of  the  results  as 
well,  and  the  Comptroller  determines  whether  the  results  are 
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significant  enough  to  brief  to  the  Commanding  Officer.  Due 
to  the  shortage  of  administrative  support  available,  the 
written  reports  are  usually  in  memorandum  form  addressed  to 
the  Commanding  Officer  and  delivered  to  the  Comptroller.  The 
review  report  in  Appendix  E  reflects  the  types  of  reviews 
that  have  been  discussed.  The  information,  as  previously 
mentioned,  is  primarily  the  current  status  of  funds  with  some 
discussion  of  problems  in  a  general  context.  Several  alter¬ 
natives  are  presented  to  provide  the  Commanding  Officer  with 
latitude  in  the  decisions  that  are  required. 

The  followup  procedure  for  reviews  is  informal.  That 
is,  if  the  problems  identified  in  the  review  occur  again, 
Internal  Review  makes  note  of  it  by  comparison  with  records 
within  Internal  Review.  Liaison  is  then  made  to  determine 
why. 

Service  to  management  is  the  philosophy  of  MCAS'S 
Internal  Review.  If  the  status  of  funds  is  known,  decisions 
regarding  items  with  significant  financial  impact  can  be 
made  with  a  better  anticipation  of  the  effect  on  the  budget. 
Control  over  ‘the  budget  in  turn  will  allow  management  to 
concentrate  on  performing  the  assigned  mission. 

The  next  chapter  will  concentrate  on  the  following  points 
to  reinforce  Internal  Review's  capability  to  provide  service 
to  management : 

1.  Policy  changes  required  to  provide  the  Internal 
Review  capability  required  by  management. 

2.  Emphasis  on  command  support  for  Internal  Review 
in  terms  of  independence,  staffing,  and  an  im¬ 
plementing  directive. 


Need  to  formalize  the  planning,  reporting,  and 
followup  procedures. 


Requirement  to  expand  the  scope  of  Internal  Re¬ 
view  and  include  the  requirement  to  meet  GAO 
Standards  whenever  possible. 


V.  CONCLUSIONS  AND  RECOMMENDATIONS 


A.  POLICY  FOR  INTERNAL  REVIEW 

The  GAO  views  internal  review  for  government  agencies 
as  an  independent  review,  such  as  internal  audit,  of  all 
elements  of  internal  control.  It  not  only  should  review 
internal  control  but  should  also  be  an  element  of  the  inter¬ 
nal  control  system.  As  such,  it  should  be  evaluated  by  an 
external  audit  agency  to  determine  its  reliability. 

The  DOD  conception  of  internal  review  is  somewhat  more 
restrictive.  At  present,  the  precise  definition,  intent, 
and  methodology  of  internal  review  in  the  DOD  is  uncertain. 
From  the  DOD  perspective  discussed  in  Chapter  III,  it  appears 
that  centralized  control  is  a  major  consideration  of  any 
internal  audit  function  as  stated  in  DODINST  7600.3  and  the 
report  by  the  DOD  Joint  Study  Group.  Concerning  internal 
review,  the  report  of  the  Study  Group  contains  the  statement 
that  most  internal  reviews  examined  did  not  meet  GAO  audit 
stands  rds  and  thus  were  deficient.  The  statement  that  inter¬ 
nal  reviews  should  meet  audit  standards  implies  professional 
audit  capability  should  be  maintained  at  every  field  activity. 
The  important  point  is  that  a  quality  review  staff  should  be 
maintained  for  a  very  limited  function;  e.g.,  "trouble¬ 
shooting."  As  also  discussed  in  Chapter  III,  it  is  interest¬ 
ing  to  note  that  the  agency  that  met  DOD  guidance  regarding 
the  care  in  avoidance  of  duplication  of  internal  audit 
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functions  did  not  produce  quality  results.  On  the  other 
hand,  the  agency  that  duplicated  such  functions  produced  a 
much  higher  proportion  of  reviews  conducted  at  acceptable 
levels  of  performance.^ 

In  SECNAVINST  7510.8,  the  Department  of  the  Navy  has  been 
more  specific  in  its  definition  of  and  guidance  for  internal 
review.  It  is  to  be  a  special  capability,  including  audit, 
that  does  not  INTENTIONALLY  duplicate  internal  audit  func¬ 
tions.  Reviews  that  are  conducted,  however,  should  produce 
reviews  of  such  quality  that  external  auditors  can  reduce 
to  a  minimum  the  number  of  duplicative  reviews  that  have  to 
be  made.  The  soon-to-be  promulgated  MCO  7540. 2A  emphasizes 
review  of  internal  controls  and  providing  corrective  recom¬ 
mendations  . 

If  a  commander  is  to  maintain  a  review  capability  that 
will  improve  both  the  effectiveness  and  efficiency  of  mis¬ 
sion  performance,  it  seems  apparent  that  it  should  be  more 
than  just  a  limited  "troubleshooting"  ability  as  it  appears 
that  the  DOD  Instruction  prescribes.  The  SECNAV  Instruction 
and  MCO  establish  a  more  comprehensive  capability.  However, 
both  of  the  latter  instructions  require  that  funding  of  this 
capability  must  be  made  available  from  available  resources. 
This  places  the  burden  of  funding  on  the  local  commander, 
who  must  take  a  reduction  in  another  area  to  fund  Internal 
Review.  This  raises  the  question  of  the  value  of  Internal 
Review.  How  much  is  enough,  and  how  much  should  Internal 


69 


J 


Review  cost?  Since  no  guidance  is  provided,  those  difficult 
questions  now  have  to  be  answered  at  the  operating  level  and 
have  resulted  in  staffing  problems. 

B.  CASE  STUDY 

Since  the  Department  of  the  Navy  approach  to  internal 
review  offers  a  better  tool  for  a  Commanding  Officer  to 
review  his  command,  this  approach  will  be  used  when  consider¬ 
ing  the  case. 

Internal  Review  at  the  MCAS  complies  with  the  intent  of 
MCO  7540.2.  The  reviews  performed  primarily  pertain  directly 
to  the  financial  resources  and  financial  management  responsi¬ 
bilities  of  the  Commander.  The  following  will  discuss  the 
effect  of  the  new  MCO  7540. 2A  and  SECNAVINST  7510.8. 

At  present,  the  reviews  conducted  concern  financial 
resources  or  fiduciary  responsibilities.  When  MCO  7540. 2A 
becomes  effective,  the  emphasis  of  internal  review  will 

include  the  efficient  and  economical  use  of  all  command 

\ 

resources,  as  does  SECNAVINST  7510.8.  Both  of  these  direc¬ 
tives  include  the  formulation  of  recommendations  to  correct 
the  conditions  that  have  an  adverse  impact.  The  recommenda¬ 
tions  provided  in  Appendix  E  relate  to  the  status  of  funds, 
not  to  the  correction  of  the  conditions  that  caused  the 
problems . 

1 .  Organization 

Internal  review  at  the  MCAS  is  implemented  under  the 
Comptroller  as  required  by  both  directives.  However,  both 
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directives  provide  for  obtaining  functional  or  technical  per¬ 
sonnel  from  within  the  Command  to  augment  the  nucleus  of 
Internal  Review.  At  present,  the  MCAS  uses  only  the  incum¬ 
bent,  except  for  fiduciary  audits  when  one  officer  is  used. 
Internal  Review  is  placed  under  the  Comptroller,  which  limits 
the  independence  of  the  Interal  Review  function.  The  Comptrol 
ler  administers  the  Internal  Review  Program  and  filters  all 
reports  produced.  Since  most  all  of  the  reports  are  informal, 
the  Comptroller  decides  what  results  the  Commanding  Officer 
should  receive. 

2 .  Staffing 

The  experience  level  and  training  of  the  incumbent 
is  impressive.  The  training  program  has  included  the  elements 
mentioned  in  SECNAVINST  7510.8  for  training  for  financial 
management,  but  should  also  provide  for  the  expanded  concern 
for  efficiency  and  effectiveness.  The  staffing  level  at 
present  is  based  on  the  limited  scope  of  internal  review  as 
provided  in  the  current  MCO.  Even  so,  if  the  incumbent  were 
to  leave.  Internal  Review,  under  present  arrangements,  would 
begin  all  over  with  a  GS-05  under  training.  Also,  if  the 
more  comprehensive  Internal  Review  is  to  be  implemented,  it 
does  not  appear  that  one  person  will  be  able  to  cover  all 
requirements  since  the  incumbent  has  a  full  schedule  with 
the  present  limited  scope. 

3 .  Program 


The  new  MCO  will  require  a  more  formalized  approach 
to  the  construction  of  the  annual  program.  The  contents  of 


the  report  to  CMC  will  be  expanded,  and  the  role  of  the  field 
activity  Commander  in  the  decision  making  process  of  program 
content  will  include  evaluation  of  projects  with  assigned 
priorities.  Emphasis  in  both  the  MCO  and  SECNAVINST  includes 
the  examination  of  the  system  of  internal  control  for  concept 
and  application,  which  will  have  an  effect  on  the  projects 
planned.  The  new  limitation  of  20  percent  by  the  new  MCO  on 
the  amount  of  reserve  manhours  should  have  little  effect  at 
the  MCAS  since  currently  only  23  percent  is  scheduled. 

4 .  Approach  to  the  Conduct  of  a  Review 

Internal  reviews  performed  to  date  have  had  a  specific 
purpose  in  mind;  e.g.,  status  of  funds  or  effect  of  system 
reporting  on  funds .  The  SECNAVINST  and  MCO  require  a  more 
comprehensive  approach.  The  SECNAVINST  provides  guidance 
that  reviews  should  be  independent,  thorough,  professional, 
and  detailed  so  that  duplicative  external  reviews  by  external 
auditors  can  be  minimized.  To  accomplish  this,  internal 
reviews  have  to  meet  the  GAO  Standards  for  internal  audit. 

The  reviews  conducted  have  followed  the  general  audit  pro¬ 
cess  but  were  not  intended  to  be  as  inclusive  as  that  required 
to  meet  such  standards. 

Some  examples  of  the  differences  that  will  be  required 
are  the  objectives  of  some  types  of  reviews  and  the  sampling 
methods  used.  The  status  of  funds  is  obviously  important, 
but  if  there  is  a  continuing  problem  as  in  the  MCAS  auto¬ 
mated  reporting  system,  reviews  should  include  attempts  to 
isolate  the  problems  and  provide  recommendations  regarding 
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the  correction  of  the  problems.  As  for  sampling,  judgement 
samples  are  appropriate  but  should  be  based  on  some  criteria 
other  than  every  fourth  document,  the  latter  of  which  may  be 
appropriate  for  a  limited-objective  review. 

Additional  changes  that  will  be  required  are  the 
changing  of  both  the  reporting  and  followup  procedures  from 
informal  to  formal.  It  should  be  recognized  that  as  a 
system  becomes  more  formal  (such  as  the  program,  reporting, 
and  followup),  more  administrative  support  will  be  required. 

C .  RECOMMEND AT I ONS 
1 .  Policy 

a.  The  apparent  differences  in  the  concept  of  inter¬ 
nal  review  at  the  DOD  and  Department  of  the  Navy  levels  must 
be  resolved  if  internal  review  is  to  produce  the  quality  of 
work  desired  by  the  DOD  Study  Group  and  by  the  Navy  to  reduce 
duplicative  audits. 

b.  In  addition,  provisions  must  be  made  at  the 
agency  level  for  the  resources  that  will  be  required  in  the 
actual  implementation  of  internal  review  as  a  functional 
component  of  the  system  of  internal  control.  Resources  must 
be  used  to  protect  and  insure  the  effective,  efficient  use 
of  a  much  greater  amount  of  resources . 

c.  In  addition,  staffing  criteria  must  be  established 
in  terms  of  numbers  of  personnel  and  skills  required.  The 
present  method  of  judging  the  personnel  required  to  execute 
the  programs  currently  in  effect  will  not  produce  quality 


Internal  Review. 


:  .  a  i^*£  'h.  i :~  Ail 


d.  Long  range  programs  need  to  be  developed  to 
assist  field  activities  in  developing  Internal  Review  Pro¬ 
grams.  Such  programs  would  insure  all  appropriate  areas  are 
scheduled  for  review  and  would  provide  justification  for  the 
resources  required  at  the  operating  level. 

2 .  Case  Study 

a.  In  order  to  make  internal  review  effective  as 
part  of  the  system  of  internal  control,  the  Commanding  Offi¬ 
cer  must  be  convinced  of  its  value  and  effectiveness  by 
being  closely  involved  with  the  growth  of  the  program.  The 
program  should  be  specially  tailored  to  the  needs  of  the  com¬ 
mand  based  on  the  mission  to  be  performed  and  known  or  sus¬ 
pected  critical  areas  of  concern. 

b.  A  directive  should  be  initiated,  similar  in 
function  to  the  formal  written  document  in  the  Private  Sector, 
establishing  the  independence,  purpose,  authority,  and 
responsibility  of  internal  review  in  implementing  the  provi¬ 
sions  of  MCO  7540. 2A  (a  copy  of  which  is  required  to  be  for¬ 
warded  to  CMC) . 

c.  Even  though  both  the  SECNAVINST  and  MCO  require 
that  Internal  Review  be  established  under  the  Comptroller,  a 
requirement  for  formal  reporting  to  the  Commanding  Officer 
and  regular  briefing  by  Internal  Review  will  improve  the 
INDEPENDENCE  of  the  Division,  which  is  required  by  GAO 
Standards,  and  will  also  demonstrate  command  support. 

d.  The  Head  of  Internal  Review  should  have  the 
ability  to  draw  knowledgeable,  experienced  personnel  from 
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the  functional/ technical  areas  under  review.  This  will  pro¬ 
vide  the  manpower  to  perform  routine  tasks,  such  as  counting 
cash,  so  the  Head  of  Internal  Review,  a  GS-09,  can  spend  his 
time  in  more  productive  work,  such  as  evaluating  the  concept 
and  application  of  the  system  of  internal  control.  Also, 
personnel  with  a  required  skill  or  expertise  should  be  avail¬ 
able  for  reviews  that  require  a  skill  not  possessed  by 
Internal  Review. 

e.  The  activities  of  Internal  Review  personnel  should 
be  concentrated  on  those  relating  directly  to  the  established 
command  Internal  Review  Program.  Activities  outside  the 
Program,  such  as  augmenting  personnel  in  other  Comptroller 
Department  sections  due  to  personnel  requirements,  should  be 
done  only  on  an  emergency  basis. 

f.  The  annual  program  should  be  constructed  to  re¬ 
flect  the  widened  scope  of  internal  review,  including  the 
elements  required  by  MCO  7540.2A.  Deviations  from  the  ap¬ 
proved  plan  should  be  approved  by  the  Commanding  Officer  and 
progress  against  the  plan  should  be  monitored,  updated  on  a 
quarterly  basis,  and  reported. 

g.  Whenever  possible  and  appropriate,  reviews  should 
be  conducted  to  meet  the  GAO  Standards.  This  will  not  only 
reduce  the  duplicative  audits  required  but  will  produce  the 
desired  results  of  detecting  problems,  providing  recommenda¬ 
tions  to  prevent  their  recurrence,  and  followup  to  insure  it. 

h.  Formal  reporting  and  followup  procedures  should 
be  instituted.  SECNAVINST  7510.8,  MCO  7540. 2A,  and  the 
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required  and  useful  information  for  successful  reporting  and 
followup.  Included  are  recommendations  for  correction  of 
conditions  that  result  in  problems,  such  as  the  continuing 
problems  of  unfilled  orders  and  personnel  turnover.  In  addi¬ 
tion,  reports  should  attempt  to  establish  a  cost-benefit 
relationship  of  what  the  review  cost  and  the  quantitative  and 
qualitative  value  of  the  findings.  This  will  provide  an 
indicator  of  value  and  performance,  as  well  as  establish  a 
basis  for  staffing. 

i.  Institute  training  for  personnel  in  other  depart¬ 
ments  on  key  findings  that  are  applicable  so  problem  areas 
can  be  highlighted. 

j.  Training  for  Internal  Review  should  include 
subjects  related  to  reviews  for  effectiveness  and  efficiency 
in  addition  to  the  financial  and  fiduciary  elements  presently 
in  the  training  plan.  The  Comptroller  of  the  Navy  offers  an 
auditing  short  course  that  would  be  appropriate. 

Regardless  of  the  programs  or  procedures  implemented,  the 
success  of  any  system  depends  on  command  support  at  all  levels. 
If  Internal  Review  is  to  be  successful,  such  support  must  be 
available  in  a  tangible  form  and  on  a  continuing  basis. 
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d.  Internal  Review  at  Lower  Echelons.  Manage¬ 
ment  at  lower  echelons  is  not  precluded  from 
establishing  groups  which,  while  not  perform¬ 
ing  independent  or  comprehensive  audits, 
would  serve  as  "trouble  shooters"  who  may- 
make  special  analyses  in  comptroller  and 
other  areas  and  assist  in  correcting  defici¬ 
encies  which  are  revealed  by  audits,  reports, 
analyses,  observations  or  other  means.  In 
authorizing  such  internal  review  activities 
at  any  echelon,  care  should  be  exercised  to 
assure  avoidance  of  duplication  of  internal 
audit  functions  as  defined  below  which  are 
assigned  to  the  centralized  audit  organiza¬ 
tions  . 

IV.  INTERNAL  AUDIT  RESPONSIBILITIES,  MISSION  AND  SCOPE 

A.  The  purpose  of  internal  audit  is  to  lead  to  action 
which  will  improve  the  operations  of  the  Department 
of  Defense.  It  is  the  independent  review  and  eval¬ 
uation  of  the  effectiveness  and  efficiency  with  which 
managerial  responsibilities  are  being  carried  out. 

It  is  an  independent  appraisal  activity  for  the  re¬ 
view  of  financial,  operational,  and  support  activi¬ 
ties  as  a  basis  for  protective  and  constructive  ser¬ 
vice  to  management.  Internal  audit  review  and  ap¬ 
praisal  covers  functions,  organizations,  systems, 
procedures,  practices  and  transactions,  records  and 
documentation  of  all  kinds.  It  is  directed  toward 
determining  that  management  controls,  practices  and 
procedures  at  all  levels  are  adequate  in  concept  and 
effective  in  application  and  that  they  provide  for 
adequate  financial  integrity  and  effective  utiliza¬ 
tion  of  resources  available.  It  is  a  managerial 
control  which  functions  by  measuring  and  evaluating 
effectiveness  of  other  controls. 

B.  Subject  to  the  authority,  direction,  and  control  of 
their  superiors,  the  heads  of  Defense  internal  audit 
organizations  will  develop  and  execute  plans,  poli¬ 
cies,  procedures,  and  programs  necessary  to  dis¬ 
charge  internal  audit  responsibilities. 
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C.  To  accomplish  the  overall  objective  of  assisting 
management  at  all  levels  in  achieving  efficient  and 
effective  administration,  audit  activities  of  Defense 
audit  organizations  will  include  the  following: 

1.  Reviewing  and  appraising  the  soundness,  adequacy 
and  application  of  accounting,  financial  and 
operating  controls. 

2.  Examining  and  appraising  the  adequacy  and  effec¬ 
tiveness  of  policies,  systems,  procedures, 
records,  and  reports  relating  to  programming, 
budgeting,  accounting,  procurement,  supply, 
financial  or  business  transactions  of  all  kinds, 
and  other  operations  having  an  impact  on  the 
expenditure  of  funds,  utilization  of  resources, 
or  accomplishment  of  management  objectives. 

3.  Appraising  performance  under,  and  ascertaining 
the  extent  of  compliance  with,  established  poli¬ 
cies,  procedures,  regulations,  laws,  etc. 

4.  Ascertaining  whether  resources  (funds,  personnel, 
material  and  other  property)  are  properly  justi¬ 
fied,  utilized,  accounted  for,  disposed  of,  and 
safeguarded  from  loss. 

5.  Ascertaining  the  reliability  of  accounting  and 
other  data  and  reports  developed  within  the  DoD 
Components  and  the  need  for,  timeliness,  and 
usefulness  thereof. 

6.  Disclosing  inefficiency,  waste  and  other  improper 
conditions  and  practices. 

7.  Reporting  the  facts  ascertained  and  making  recom¬ 
mentations  in  connection  therewith  to  appropriate 
levels  of  management. 

D.  Internal  audit  is  a  staff  function  which,  to  operate 
effectively,  must  be  completely  independent  of  line 
operations.  The  internal  auditor's  responsibility 
is  to  examine,  observe,  review,  and  evaluate  the 
policies,  systems,  and  procedures,  and  the  perform¬ 
ance  thereunder,  respecting  all  aspects  of  manage¬ 
ment  for  the  purpose  of  reporting  findings  and  mak¬ 
ing  recommendations  for  corrective  action  to  manage¬ 
ment.  The  existence  of  an  internal  audit  staff  in 
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no  way  relieves  other  personnel  of  duties  and  res¬ 
ponsibilities  assigned  to  them.  Full  responsibility 
is  vested  in  the  DoD  Components  and  the  various  com¬ 
mands  therein  for  proper  management;  for  protection 
and  use  of  assets  under  their  control;  for  compliance 
with  directives  from  higher  authority;  and  for  the 
accuracy,  propriety,  legality,  and  reliability  of 
their  actions. 

E.  While  the  scope  of  internal  audit  responsiblity  is 
broad,  it  does  not  include  criticism  of  management 
decisions  based  upon  after-the-fact  substitution  of 
the  auditor's  judgment  for  that  of  responsible  man¬ 
agement.  Most  management  decisions  involve  risk  and 
uncertainty.  Thus,  the  fact  that  later  events  prove 
the  decision  to  be  wrong  is  not,  taken  by  itself,  a 
subject  for  audit  reporting.  It  becomes  a  subject, 
however,  when  the  decision  indicates  inefficient 
operations,  inadequate  procedures,  or  other  defici¬ 
encies,  the  reporting  of  which  would  lead  to  future 
improvements  in  systems  or  procedures,  or  avoidance 
of  errors.  The  following  are  illustrative: 

1.  Erroneous  decisions  made  on  the  basis  of  in¬ 
correct  or  incomplete  data  because  of  deficien¬ 
cies  in  the  information  system. 

2.  Erroneous  decisions  arising  from  failure  to  con¬ 
sider  data  which  were  readily  available  at  the 
time  the  decision  was  made. 

3.  Decisions  resulting  in  actions  which  were  con¬ 
trary  to  law,  policy  or  regulations. 

F.  The  internal  auditor  does  not  have  the  authority  to 
make  changes,  nor  to  order  changes  made,  in  the  pro¬ 
cedures  or  operations  of  the  activities  audited. 

The  internal  auditor  is  not  responsible  for  develop¬ 
ing  systems,  methods  and  procedures,  nor  for  the 
performance  of  duties  constituting  a  part  of  regular 
line  operations.  Such  responsibilities  would  tend 
to  give  him  a  biased  viewpoint  when,  in  the  course 
of  his  audits,  he  would  be  required  to  appraise  his 
own  work.  However,  the  auditor  may  call  attention 
to  problem  areas  with  respect  to  any  of  these  mat¬ 
ters  and  provide  advisory  assistance  to  system 
development  personnel  particularly  with  respect  to 
such  aspects  of  internal  controls  and  audit  trails. 
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The  auditor,  based  upon  his  independent  examinations, 
reviews,  and  appraisals,  provides  an  advisory  service 
and  makes  recommendations  to  management  for  improve¬ 
ments  and  for  the  correction  of  deficiencies.  It  is 
the  responsibility  of  management  to  determine  what 
action  will  be  taken  and  to  give  the  required  correc¬ 
tive  orders.  This,  however,  does  not  relieve  the 
audit  staff  of  the  responsibility  for  following  up 
on  recommendations  to  determine  whether  they  were 
given  adequate  consideration  and  that  management's 
orders  to  accomplish  changes  and  correct  deficiencies 
were  effectuated. 
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APPENDIX  B 


TRAINING  PLAN 

I.  TITLE  -  Auditor,  GS-09 

Position  -  Head,  Internal  Review  Division,  Comptroller 
Department. 

11  *  LENGTH  OF  TRAINING  PERIOD 

Auditor  Trainee,  GS-05  -  From  hire  date  for  1  calendar 
year  depending  on  progress,  qualifications  and  supervisor's 
recommendation . 

Advanced  Trainee,  GS-07  -  From  promotion  date  to  GS-07 
for  1  calendar  year. 

III.  OBJECTIVES .  To  train  the  incumbent  from  the  grade  of 
GS-05  to  fulfill  the  Auditor  position  within  the  command. 

By  college  education,  graduate  education  and  on-the-job 
training  the  trainee  will  be  able  to  apply  standard  audit 
procedures  and  install  audit  programs  by  obtaining  a  good 
working  knowledge  of  accounting,  budgeting,  financial  reports, 
data  processing  and  systems  theory  and  practice. 

IV.  TYPE  TRAINING 


A.  On-the-job  Training  -  GS-05 

1.  Accounting  Division.  Trainee  will  work  in  the 
Accounting  Division  for  the  first  four  months.  Under  super¬ 
vision  of  the  Accounting  Officer,  the  trainee  will  progress 
through  all  phases  of  Funds  Resource  Branch,  Stores  Branch, 
Cost  Accounting  Branch,  Civilian  Payroll  Branch,  and  Plant 
Property.  While  learning  the  basic  systems  the  trainee  will 
perform  routine  audit  assignments;  examine  routine  account¬ 
ing  documents  to  verify  the  accuracy  of  computations  and 
ascertain  that  t:  ansactions  tested  are  properly  recorded  and 
supported  and  are  in  accordance  with  pertinent  laws  and 
regulations.  Trainee  will  perform  studies  and  analyze  exist¬ 
ing  data  processing  systems  and  directives  for  a  three  month 
period.  Trainee  will  become  familiar  with  data  processing 
theory  and  systems  theory.  Liaison  visits  to  Camp 

and/or  COMCAB  will  be  made  to  understand  Data  Process¬ 

ing  organization. 

2.  Budgeting  Division.  Trainee  will  work  in  the 
Budgeting  Division  for  a  three  month  period,  and  will  parti¬ 
cipate  in  the  budgeting  process  from  the  Cost  Center  level 
to  finalization  at  station  level.  Midyear  review  procedures 
will  be  understood  and  all  budgetary  reports  will  be  reviewed 
for  understanding  of  content. 
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3.  On  an  as  assigned  basis,  trainee  will  perform 
verification  of  inventories,  tracing  prices  to  invoices  or 
price  lists,  counting  cash,  testing  the  aging  of  receivables 
and  payables,  listing  balances  of  ledger  accounts,  preparing 
detailed  statements  and  schedules  for  reports,  and  prepare 
simple  reconciliations . 

4.  Comptroller  Office.  Work  under  the  direction 
of  the  Deputy  Comptroller  to  understand  overall  general  fin¬ 
ancial  budgetary  and  management  policy. 

B.  On-the-job  Training  C.S-7. 

1.  Work  under  the  direction  of  the  Deputy  Comptrol¬ 
ler  to  strengthen  the  understanding  of  the  various  divisions 
of  the  Comptroller  Department.  Serves  as  an  Internal  Review 
Auditor  Trainee  performing  a  wide  range  of  audit  assignments 
to  prepare  trainee  to  perform  more  difficult  tasks.  Trainee 
will  be  assigned  audit  duties  to  include  cost  centers,  all 
branches  of  accounting,  budget  division,  and  other  areas  as 
directed.  Analysis  of  data  processing  systems  will  be  made 
with  the  intention  of  developing  new  or  revised  methods  to 
change  or  supplement  automated  requirements.  Spend  at  least 
two  months  working  in  areas  of  Supply  to  better  understand 
the  Financial/Supply  interface.  Spend  at  least  one  month 
in  the  Public  Works  Department  financial  section. 

C.  Special  Projects  or  Assignments. 

1.  Cost  Center  Management.  Perform  an  in-depth 
study  of  the  Cost  Centers  to  include: 

a.  Financial  Management . 

b.  Budgetary  Requiren ants . 

c.  Cost  Center-Supply  System  Interface. 

2.  Comptroller  Department  organization.  Trainee 
will  perform  an  in-depth  study  of  how  the  Comptroller  Depart¬ 
ment  is  organized,  why,  and  how  it  compares  to  U.  S.  Marine 
Corps  standards.  All  directives  from  higher  authorities 
will  be  analyzed  and  an  organizational  manual,  along  with 
detailed  instructions  prepared  to  reorganize  the  department 
or  substantiate  current  organization. 

D.  Rotational  Assignments.  Covered  in  on-the-job 
training.  All  areas  in  the  Comptroller's  Department,  Cost 
Centers,  Public  Works,  and  Supply. 

F.  Self-Development.  Participate  in  available  pro- 

t.iI  societies  and  the  below  reading  proaram: 
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NAVCOMPT  Manual  Vol.  7 

DOD  7045.1  Programming  System 

DOD  7040.5  Definition  of  Expenses  and  Investment 
Costs 

DOD  7045.7  Review  and  Approval  of  Changes  to  FYDP 
DOD  7110-1-M-DOD  Budget  Guidance  Manual 
Financial  Management  of  Resources  (Departmental  and 
Field  Activities)  NAVSO  P-3006 

F.  Persons  responsible  for  implementing  and  coordinat¬ 
ing  training  plan: 

Deputy  Comptroller 

V.  EVALUATION 


A.  Trainee  Evaluation.  A  comprehensive  written  report 
of  his  total  training  experience  will  be  required  of  the 
trainee  at  6-month  intervals  while  in  training  and  upon  com¬ 
pletion  of  the  total  training  period.  Format  similar  to  en¬ 
closure  (1)  will  be  used  to  make  this  evaluation. 

B.  Supervisory  Evaluation.  The  trainee's  progress 
will  be  continually  evaluated  throughout  the  program  by  the 
Program  Coordinator.  Quarterly  reports  will  be  submitted 
in  format  similar  to  enclosure  (2),  to  the  Comptroller, 
which  evaluates  the  trainee's  overall  progress,  demonstrated 
ability  to  apply  the  subject  matter  of  the  training  to  in¬ 
dividual  needs,  and/or  need  to  revise  the  program.  If  the 
Program  Coordinator  should  determine  at  any  time  during  the 
course  of  the  training  program  that  the  trainee  is  not  meet¬ 
ing  the  general  standards  as  set  forth  in  the  training  plan, 
an  additional  report  shall  be  submitted  to  the  Comptroller 
recommending  appropriate  action.  When  the  Program  Coordina¬ 
tor  determines  that  the  trainee  has  satisfactorily  completed 
the  objectives  and  requirements  of  the  training  program,  she 
will  certify  that  the  requirements  of  the  approved  plan  have 
been  fulfilled  and  that  the  trainee  is  satisfactorily  per¬ 
forming  the  duties  at  the  respective  level.  This  certifica¬ 
tion,  along  with  the  trainee's  report  and  other  supporting 
documents,  will  be  submitted  to  the  Comptroller. 

VI.  CERTIFICATION .  The  Comptroller  will  review  the  evalua¬ 
tion  reports  and  forward  these  reports  with  appropriate 
recommendations  to  the  Civilian  Personnel  Officer.  At  com¬ 
pletion  of  the  training  program  for  each  level,  and  when 
the  incumbent  is  certified  or  qualified  by  the  Civilian  Per¬ 
sonnel  Officer,  incumbent  will  be  promoted  accordingly. 
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APPENDIX  C 

FY1979  INTERNAL  REVIEW  PROGRAM 

1.  Monthly  Requirements  28  Man  Days 

a.  Audits:  Funds  issued  to  Imprest  Fund  cashiers, 

collection  agents  and  custodians. 

b.  Reports:  Verify  the  accuracy  of  the  monthly  Com¬ 

missary  Store  Report  and  the  Flying  Hour 
Cost  Report. 

2.  Quarterly  Requirements  13  Man  Days 

a.  Audits:  Audit  cash/vouchers  held  as  cash  and  other 

assets  as  recorded  in  the  Disbursing  Offi¬ 
cer's  official  cash  book. 

b.  Reports:  Verify  the  accuracy  of  the  Banking  Facility 

Report . 

3.  Annual  Requirements  45  Man  Days 

a.  Audits:  Civilian  Payroll  and  Timekeeping  procedures. 

b.  Reports:  Preparation  of  the  Internal  Review  Program 

Report . 

Prepare/Review  Commercial/Industrial 
Activities  Inventory  Report. 

4.  Bi-Annual  Requirements  45  Man  Days 

a.  Audits:  Special  Deposit  Accounts  established  with 
the  Disbursing  Officer  by  private  parties. 
Verify  accuracy  and  ensure  proper  proced¬ 
ures  are  being  used  by  Fund  Administrators 
in  maintenance  of  Memorandum  Accounting 
Records  for  fund  control.  Also,  ensure 
proper  utilization  of  funds. 

5.  As  Assigned/Required  60  Man  Days 

a.  Follow-up  on  own  previous  audits  to  ensure  correc¬ 
tive  action (s)  are  being  taken  and  approved  recom¬ 
mendations  have  been  implemented. 

b.  Coordinate,  assemble,  forward  to  CMC,  and  follow-up 
on  audits  by  outside  agencies. 

c.  Review  and  submit  recommendations  concerning  local 
directives . 

d.  Conduct  audits  of  unforeseen  problems  on  an  "as 
required"  basis. 

6.  Training  49  Man  Days 

a.  Annual  training  of  an  Accountant-Auditor  GS-510  - 
5/7/9  in  all  areas  of  financial  management  in  the 
Department  of  the  Navy  and  Marine  Corps  so  that 
Journeyman  level  can  be  reached  in  two  years. 
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FY1979  INTERNAL  REVIEW  PROGRAM  (Continued) 


Leave  20  Man  Days 

a.  Earned  Annual  Leave. 

Total  Man  Days  Scheduled  260  Man  Days 


APPENDIX  D 


REPORT  OF  OPERATIONS  OF  INTERNAL  REVIEW 
ACTIVITY;  MCAS  , _ PERIOD;  I  Oct  78  to  31  Mar  79 


1.  Personnel  Authorized  as  of  End  of  Reporting  Period  NUMBER 
Professional 

Civilian 
Military 

Sub- total 
Administrative 
Civilian 
Military 

Sub-total 
TOTAL 

2.  Operating  Costs  Incurred  During  Reporting  Period  AMOUNT 


Civilian  Personnel  $7,204 

Military  Personnel  -0- 

Travel  850 

Other  50 

TOTAL  $8,104 


3.  Workload  Data  Applicable  to  Reporting  Period  NUMBER  OF 

" . .  ~  PERSONNEL 

a.  Recognized  Requirement  as  of  end  of  period  2 

b.  Assigned  as  of  end  of  period  1 


c.  Shortfall  1 


4.  Operational  Highlights 

Operations  during  this  reporting  period  included: 


1 

-0- 

1 


(Trainee) 


-0- 

-0- 

-0- 

1 


a.  Study  of  procedures  utilized  in  collecting  and  controlling 
cash  funds. 

b.  Study  of  the  interface  between  Supply/Accounting  Fund 
Administrators . 

c.  Two  off-station  training  courses. 


5.  Reports  Issued  and  Resources  Applied  During  Reporting  Period 
No  formal  reports  issued  during  reporting  period. 


6.  Significant  Findings  of  Waste 
None. 


7.  Potential  Fraud  Cases  Referred  to  Investigative  Organizations 
during  Reporting  Period 

None. 
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APPENDIX  E 

INTERNAL  REVIEW  REPORT 


From:  Internal  Review 

To:  Commanding  Officer 

Via:  Comptroller 

Subj :  Review  of  Funds  Status  as  of  23  August  1979  -  s-3  Fund 

Administrator  Codes  D2,  El  and  E3 

Obj :  To  ascertain  Memo  Record  balances  in  an  attempt  to  present 

overexpenditure  of  FY79  funds  allocated  to  the  S-3  activity. 

1.  Balances  at  the  end  of  the  first  quarter  were  not  carried  forward 
to  the  second  quarter.  Correction  was  made  at  the  time  of  the  review 
by  the  Fund  Administrator. 

2.  A  verbal  decrease  of  authorization  was  shown  in  the  second  quarter 
However/  the  third  quarter  authorization  reflected  the  decrease.  The 
record  was  adjusted  in  the  course  of  the  review  by  the  Fund  Administra¬ 
tor. 

3.  After  the  above  adjustments  were  recorded,  the  following  balances 
as  of  23  August  appear  in  the  Memo  Record: 

Structural  Fire  Department  (D2)  $  231.13 

Air  Field  Operations  (El)  3,947.31 

Crash  and  Rescue  (E3)  1,711.13 

4.  It  was  determined  that  the  Unfilled  Requisition  Report  of  31  July 
1979  lists  a  total  of  47  documents  which  have  either  been  cancelled 
or  completed  per  S-3  records.  Following  is  a  breakdown  by  fund  code: 

No.  of 


Documents 

Amount 

Structural  Fire  Department  (D2) 

6 

$  1,257.11 

Air  Field  Operations  (El) 

15 

1,203.48 

Crash  and  Rescue  (E3) 

26 

11,787.55 

Total 

47 

$14,248.14 

These  documents  have  been  called  to 

the  attention  of 

the  accounting 

activity. 

5.  Following  is  an  aging  of  the  above  mentioned  documents  from  date 
of  initiation  to  cancellation  or  completion  and  from  julian  date  of 
document  to  julian  date  of  the  UR  Report. 
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1  to  10  11  to  30  31  to  60  61  to  90  91  to  180  Over  180 
Days  Days  Days  Days  Days  Days 


Completed/Cancelled  21  17  7  0  2  0 

Age  per  UR  Report  1  13  6  6  12  9 

6.  The  timeliness  of  paper  flow  between  the  initiating  activity.  Supply, 
Data  Processing  and  Accounting  activities  is  less  than  desirable.  How¬ 
ever,  the  type  of  material  ordered,  priority,  whether  it  is  a  direct 
turnover  item,  a  supply  system  item,  a  procurement  or  a  contract  item 
makes  a  vast  difference  in  the  timeliness  of  the  paper  flow.  Procure¬ 
ment  items  requiring  a  competitive  bid,  or  a  cost  estimate  may  take 
several  months  between  the  initiation  of  the  document  and  the  completion 
of  the  document.  Therefore,  it  is  nearly  impossible  to  determine  the 
time  lag  in  processing  a  requisition/document  from  start  to  finish. 

7.  It  appears  that  the  present  fund  balance  on  hand  23  August  1979  is 
insufficient  to  cover  normal  operations  in  the  D2  activity. 

8.  Following  is  a  reconcilement  of  Memo  Record  balances  to  the  mech¬ 
anized  report  balances: 


D2 

El 

JE3 

Mechanized  balances 

$(424.00) 

$7,720.00 

$44,702.00 

Memo  Record  balance 

$  231.13 

$3,947.31 

$  1,711.13 

FY  Documents  in  FY79  mech. 
reports 

(802.98) 

-0- 

-0- 

UR's 

-0- 

500.36 

27,951.72 

Documents  not  on  mechanized 

report  -0- 

3,344.71 

11,817.87 

Price  Variances 

147.85 

(72.38) 

3,221.28 

$(424.00) 

$7,720.00 

$44,702.00 

The  FY78  documents  above  have  been  reported  to  the  accounting  activity 
for  correction  of  entry.  Each  transaction  was  completed  prior  to 
16  August  1978  and  therefore  belong  in  FY78  business. 


APPENDIX  F 


GLOSSARY  OF  TERMS 


AUDIT  TRAIL  —  Accumulation  of  source  documents  and  records 
which  are  the  support  of  transactions  that  occurred  during 
the  period  under  audit. 

BAYESIAN  STATISTICS  —  A  method  of  computing  the  probability 
of  a  state  of  nature  and  modification  of  the  probability  by 
using  information  gathered  from  an  experiment. 

CONFIDENCE  LEVEL  —  Refers  to  the  extent  the  auditor  connects 
the  statistical  term  with  the  auditor's  subjective  confidence 
in  support  of  a  proposition. 

GENERALLY  ACCEPTED  ACCOUNTING  PRINCIPLES  —  Principles  used 
to  evaluate  financial  accounting  information  —  they  are 
established  by  authoritative  bodies,  such  as  the  Financial 
Accounting  Standards  Board  and  the  Securities  and  Exchange 
Commission,  or  by  long  usage  in  practice. 

JUDGEMENT  SAMPLE  —  A  sample  where  the  size  of  the  sample 
and  individual  items  in  the  sample  are  chosen  on  the  basis 
of  sound  reasoning  by  the  auditor. 

REPRESENTATIVE  SAMPLE  --  A  sample  that  possesses  the  same 
characteristics  and  in  the  same  proportion  as  the  population. 

TELAUTOWRITER  EQUIPMENT  —  Equipment  used  by  operating 
organizations  to  order  parts  from  supply  by  directly  trans¬ 
mitting  handwritten  information  to  supply  at  the  time  it  is 
written. 
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